| Vulnerability Name: | CVE-2004-0623 (CCN-16517) | ||||||||
| Assigned: | 2004-06-25 | ||||||||
| Published: | 2004-06-25 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Fri Jun 25 2004 - 11:42:31 CDT format string vulnerability in Gnats Source: MITRE Type: CNA CVE-2004-0623 Source: BUGTRAQ Type: UNKNOWN 20040625 format string vulnerability in Gnats Source: DEBIAN Type: DSA 590-1 format string vulnerability Source: DEBIAN Type: DSA-590 gnats -- format string vulnerability Source: CCN Type: GNATS Web page GNATS - GNU Project - Free Software Foundation (FSF) Source: CCN Type: OSVDB ID: 11622 GNATS log_msg() Function Remote Format String Source: BID Type: Patch, Vendor Advisory 10609 Source: CCN Type: BID-10609 GNU GNATS Syslog() Format String Vulnerability Source: XF Type: UNKNOWN gnats-format-string(16517) Source: XF Type: UNKNOWN gnats-format-string(16517) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||