CVE-2005-1100 Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is pas...
HighCVSS 7.5
EPSS 11.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| salim gasmi gld | = 1.3 | No fix listed |
| salim gasmi gld | = 1.4 | No fix listed |
| debian/postfix-gld(Debian:12) | < 1.5-1 | 1.5-1 |
| debian/postfix-gld(Debian:13) | < 1.5-1 | 1.5-1 |
| debian/postfix-gld(Debian:14) | < 1.5-1 | 1.5-1 |
References
- Debian Security Tracker CVE-2005-1100 vendor-advisory
- 20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities. mailing-list
- 14941 patch third-party-advisory
- GLSA-200504-10 patch vendor-advisory
- 1013678 vdb-entry
- 15493 vdb-entry
- gld-cnfc-format-string(20067) vdb-entry