CVE-2004-0450

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Affected products

• Log2mail (Log2mail)

References

• http://felinemenace.org/~jaguar/advisories/log2mail.txt
• http://osvdb.org/6711
• http://secunia.com/advisories/11768
• http://secunia.com/advisories/11769
• http://www.debian.org/security/2004/dsa-513
• http://www.securityfocus.com/bid/10460
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16311