CVE-2003-1236

Published: Dec 31, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.

Affected (1)

Products: Tanne: Tanne

Tanne

1 product

Tanne

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tanne Tanne	Version 0.6.17

References (16)

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html

Source: cve@mitre.org

ExploitPatch

http://secunia.com/advisories/7831

Source: cve@mitre.org

http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2

Source: cve@mitre.org

Patch

http://www.iss.net/security_center/static/11006.php

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/305460

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/archive/1/305663

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6553

Source: cve@mitre.org

ExploitPatch

http://www.securitytracker.com/id?1005900

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html