FreeBSD : ez-ipupdate -- format string vulnerability (e69ba632-326f-11d9-b5b7-000854d03344)
Critical Nessus Plugin ID 36790
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionData supplied by a remote server is used as the format string instead of as parameters in a syslog() call. This may lead to crashes or potential running of arbitrary code. It is only a problem when running in daemon mode (very common) and when using some service types.
SolutionUpdate the affected package.