CVEvulnerability
CVE-2004-0451
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Affected configurations
• sup sup 1.8
• debian debian linux 3.0
References
- http://securitytracker.com/id?1010539 securitytracker.com
- http://www.debian.org/security/2004/dsa-521 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10571 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16459 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1010539 securitytracker.com
- http://www.debian.org/security/2004/dsa-521 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10571 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16459 exchange.xforce.ibmcloud.com