FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0451

This CVE name corresponds to:

Entered	Topic
2005-02-27	sup -- format string vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0451 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0451
Phase	Assigned(20040506)

Description

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

References

Source	Reference
DEBIAN	DSA-521
BID	10571
SECTRACK	1010539
XF	sup-format-string(16459)