Lucene search
HistoryDec 06, 2004 - 5:00 a.m.
CVE-2004-0451
cve-2004-0451
software upgrade protocol
sup
format string vulnerabilities
remote code execution
syslog
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.013
Percentile
86.1%
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Affected configurations
Node
supsupMatch1.8
Node
debiandebian_linuxMatch3.0
ORdebiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
Related
openvas
openvas
Debian Security Advisory DSA 521-1 (sup)
2008-01-17 00:00:00
FreeBSD Ports: sup
2008-09-04 00:00:00
FreeBSD Ports: sup
2008-09-04 00:00:00
nvd
nvd
CVE-2004-0451
2004-12-06 05:00:00
cvelist
cvelist
CVE-2004-0451
2004-06-30 04:00:00
osv
osv
sup - format string vulnerability
2004-06-18 00:00:00
debian
debian
[SECURITY] [DSA 521-1] New sup packages fix format string vulnerabilities
2004-06-19 03:48:57
debiancve
debiancve
CVE-2004-0451
2004-12-06 05:00:00
nessus
nessus
FreeBSD : sup -- format string vulnerability (2c5757f4-88bf-11d9-8720-0007e900f87b)
2005-07-13 00:00:00
Debian DSA-521-1 : sup - format string vulnerability
2004-09-29 00:00:00
freebsd
freebsd
sup -- format string vulnerability
2004-06-19 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.013
Percentile
86.1%
Related for CVE-2004-0451