critical10.0Public exploit code
CVE-2004-0354
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU Anubis 3.6.x/3.9.x - Multiple Format String Vulnerabilities2004-03-01 · remote · linux · Verified
Impact
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Anubis | Versions 3.6.0, 3.6.1, 3.6.2, 3.9.92, 3.9.93 |
References
- NVD record
- CVE.org record
- http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
- http://marc.info/?l=bugtraq&m=107843915424588&w=2
- http://www.securityfocus.com/bid/9772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15346
- http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
- http://marc.info/?l=bugtraq&m=107843915424588&w=2
- http://www.securityfocus.com/bid/9772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15346