high7.2
CVE-2004-0834
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
Impact
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mandrakesoft | Mandrake Multi Network Firewall | Version 8.2 |
| Speedtouch | Speedtouch Usb Driver | Versions 1.0, 1.1, 1.2, 1.2_beta1, 1.2_beta2, 1.2_beta3 |
| Gentoo | Linux | Version 1.4 |
| Mandrakesoft | Mandrake Linux | Versions 8.2, 9.0, 9.1, 9.2, 10.0, 10.1 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 2.1 |
References
- NVD record
- CVE.org record
- http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
- http://speedtouch.sourceforge.net/index.php?/news.en.html
- http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17792
- http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
- http://speedtouch.sourceforge.net/index.php?/news.en.html
- http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17792