CVE-2005-1100

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

Affected (2)

Products: Salim Gasmi: Gld

Salim Gasmi

1 product

Gld

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Salim Gasmi Gld	Version 1.3
Salim Gasmi Gld	Version 1.4

References (12)

http://marc.info/?l=bugtraq&m=111339935903880&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14941

Source: cve@mitre.org

Patch

http://security.gentoo.org/glsa/glsa-200504-10.xml

Source: cve@mitre.org

Patch

http://securitytracker.com/alerts/2005/Apr/1013678.html

Source: cve@mitre.org

http://www.osvdb.org/15493

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20067

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=111339935903880&w=2