debian/sup vulnerabilities

Latest debian/sup CVEs

Newest publication first

1. CVE-2004-0451 Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string s...

   Published 2004-06-30

   High·CVSS 10.0 EPSS 4.4%

   Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

2. DSA-521 sup - format string vulnerability

   Published 2004-06-18

   Unknown

3. CVE-2003-0606 sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

   Published 2003-08-01

   Medium·CVSS 4.6 EPSS 0.32%

   sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

4. DSA-353 sup - insecure temporary file

   Published 2003-07-29

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.