CVE-2004-0451

EPSS 4.39%
Veröffentlicht 06.12.2004 05:00:00
Zuletzt bearbeitet 16.06.2026 22:05:39
Erkennungen
Login

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sup ≫ Sup Version 1.8

Debian ≫ Debian Linux Version 3.0

Debian ≫ Debian Linux Version 3.0 Edition alpha

Debian ≫ Debian Linux Version 3.0 Edition arm

Debian ≫ Debian Linux Version 3.0 Edition hppa

Debian ≫ Debian Linux Version 3.0 Edition ia-32

Debian ≫ Debian Linux Version 3.0 Edition ia-64

Debian ≫ Debian Linux Version 3.0 Edition m68k

Debian ≫ Debian Linux Version 3.0 Edition mips

Debian ≫ Debian Linux Version 3.0 Edition mipsel

Debian ≫ Debian Linux Version 3.0 Edition ppc

Debian ≫ Debian Linux Version 3.0 Edition s-390

Debian ≫ Debian Linux Version 3.0 Edition sparc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.39%	0.9

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://securitytracker.com/id?1010539

http://www.debian.org/security/2004/dsa-521

Patch

Vendor Advisory

http://www.securityfocus.com/bid/10571

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16459

https://nvd.nist.gov/vuln/detail/CVE-2004-0451

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0451

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0451

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-0451