CVE-2004-0354

Published: Nov 23, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

Affected (5)

Products: Gnu: Anubis

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Gnu Anubis	Version 3.6.0
Gnu Anubis	Version 3.6.1
Gnu Anubis	Version 3.6.2
Gnu Anubis	Version 3.9.92
Gnu Anubis	Version 3.9.93

References (8)

http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=107843915424588&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/9772

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15346

Source: cve@mitre.org

http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=107843915424588&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9772

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15346

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.