CVEvulnerability

CVE-2004-0536

7.2 HIGH Published 2004-08-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

Affected configurations

• tripwire tripwire 2.2.1 • tripwire tripwire 2.3.0 • tripwire tripwire 2.3.1 • tripwire tripwire 2.3.1.2 • tripwire tripwire 2.4.0 • tripwire tripwire 2.4.2 • tripwire tripwire 3.0 • tripwire tripwire 3.0.1 • tripwire tripwire 4.0 • tripwire tripwire 4.0.1 • tripwire tripwire 4.1

References