CVE-2005-1100

Description

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20067

http://www.osvdb.org/15493

http://securitytracker.com/alerts/2005/Apr/1013678.html

http://security.gentoo.org/glsa/glsa-200504-10.xml

http://secunia.com/advisories/14941

http://marc.info/?l=bugtraq&m=111339935903880&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3