CVEvulnerability

CVE-2004-0834

7.2 HIGH Published 2004-12-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

Affected configurations

• mandrakesoft mandrake multi network firewall 8.2 • speedtouch speedtouch usb driver 1.0 • speedtouch speedtouch usb driver 1.1 • speedtouch speedtouch usb driver 1.2 • speedtouch speedtouch usb driver 1.2 beta1 • speedtouch speedtouch usb driver 1.2 beta2 • speedtouch speedtouch usb driver 1.2 beta3 • speedtouch speedtouch usb driver 1.3 • gentoo linux 1.4 • mandrakesoft mandrake linux 8.2 • mandrakesoft mandrake linux 9.0 • mandrakesoft mandrake linux 9.1 • mandrakesoft mandrake linux 9.2 • mandrakesoft mandrake linux 10.0 • mandrakesoft mandrake linux 10.1 • mandrakesoft mandrake linux corporate server 2.1

References