Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.

Data supplied by a remote server is used as the format string instead of as parameters in a syslog() call. This may lead to crashes or potential running of arbitrary code. It is only a problem when running in daemon mode (very common) and when using some service types.

Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate, a client for many dynamic DNS services. This problem can only be exploited if ez-ipupdate is running in daemon mode (most likely) with many but not all service types.

Ulf Harnhammar discovered a format string vulnerability in ez-ipupdate, a client for many dynamic DNS services. The updated packages are patched to protect against this problem.

The remote host is affected by the vulnerability described in GLSA-200411-20 (ez-ipupdate: Format string vulnerability)

    Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate.
  Impact :

    An attacker could exploit this to execute arbitrary code with the permissions of the user running ez-ipupdate, which could be the root user.
  Workaround :

    There is no known workaround at this time.

The remote host is using a version of EZ-IPupdate, a tool to update DNS records, that is vulnerable to a remote format string flaw. This vulnerability is present only if EZ-IPupdate runs in daemon mode

ID	Name	Product	Family	Severity
36790	FreeBSD : ez-ipupdate -- format string vulnerability (e69ba632-326f-11d9-b5b7-000854d03344)	Nessus	FreeBSD Local Security Checks	critical
15727	Debian DSA-592-1 : ez-ipupdate - format string	Nessus	Debian Local Security Checks	critical
15697	Mandrake Linux Security Advisory : ez-ipupdate (MDKSA-2004:129)	Nessus	Mandriva Local Security Checks	critical
15695	GLSA-200411-20 : ez-ipupdate: Format string vulnerability	Nessus	Gentoo Local Security Checks	critical
2399	EZ-IPupdate show_message() Remote Format String	Nessus Network Monitor	Web Clients	medium

Detections

Analytics

CVE-2004-0980

critical

Tenable Plugins

critical

critical

critical

critical

medium