CVE-2003-1236

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• TANne 0.6.17 - Session Manager SysLog Format String2003-01-07 · remote · linux · Verified

Impact

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.

Affected products

References

• NVD record
• CVE.org record
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html
• http://secunia.com/advisories/7831
• http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2
• http://www.iss.net/security_center/static/11006.php
• http://www.securityfocus.com/archive/1/305460
• http://www.securityfocus.com/archive/1/305663
• http://www.securityfocus.com/bid/6553
• http://www.securitytracker.com/id?1005900
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html
• http://secunia.com/advisories/7831
• http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2
• http://www.iss.net/security_center/static/11006.php
• http://www.securityfocus.com/archive/1/305460
• http://www.securityfocus.com/archive/1/305663
• http://www.securityfocus.com/bid/6553
• http://www.securitytracker.com/id?1005900