NetSight
IP …
high7.2

CVE-2004-1469

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string s…

Impact

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.

Affected products

VendorProductAffected versions
Peter D. GraySus
Versions 2.0, 2.0.1

References