7.5

CVE-2004-2026

Exploit
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apsis ≫ Pound Version1.0
Apsis ≫ Pound Version1.1
Apsis ≫ Pound Version1.2
Apsis ≫ Pound Version1.3
Apsis ≫ Pound Version1.4
Apsis ≫ Pound Version1.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.64% 0.93
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html
Exploit
http://secunia.com/advisories/11528
Patch
http://security.gentoo.org/glsa/glsa-200405-08.xml
Patch
http://securitytracker.com/id?1010034
http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000
http://www.osvdb.org/5746
http://www.securityfocus.com/bid/10267
Patch
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16033