CVE-2004-2026

Description

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16033

http://www.osvdb.org/5746

http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000

http://securitytracker.com/id?1010034

http://security.gentoo.org/glsa/glsa-200405-08.xml

http://secunia.com/advisories/11528

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3