CVE-2004-2026

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

Affected (6)

Products: Apsis: Pound

Apsis

1 product

Pound

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apsis Pound	Version 1.0
Apsis Pound	Version 1.1
Apsis Pound	Version 1.2
Apsis Pound	Version 1.3
Apsis Pound	Version 1.4
Apsis Pound	Version 1.5

References (16)

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/11528

Source: cve@mitre.org

Patch

http://security.gentoo.org/glsa/glsa-200405-08.xml

Source: cve@mitre.org

Patch

http://securitytracker.com/id?1010034

Source: cve@mitre.org

http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000

Source: cve@mitre.org

http://www.osvdb.org/5746

Source: cve@mitre.org

http://www.securityfocus.com/bid/10267

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16033

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html