CVE-2004-2026

Description

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16033

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2018

http://www.securityfocus.com/bid/10267

http://www.osvdb.org/5746

http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000

http://securitytracker.com/id?1010034

http://security.gentoo.org/glsa/glsa-200405-08.xml

http://secunia.com/advisories/11528

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS