CVE-2004-0354 | BDVDB-2026-6291 Detail

Description#

Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/15346
http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
http://marc.info/?l=bugtraq&m=107843915424588&w=2
http://www.securityfocus.com/bid/9772

Exploit#

No public exploit known

History#

Version 12004-03-18Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.