FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

ez-ipupdate -- format string vulnerability

Affected packages
ez-ipupdate < 3.0.11b8_2

Details

VuXML ID e69ba632-326f-11d9-b5b7-000854d03344
Discovery 2004-11-11
Entry 2004-11-11

Data supplied by a remote server is used as the format string instead of as parameters in a syslog() call. This may lead to crashes or potential running of arbitrary code. It is only a problem when running in daemon mode (very common) and when using some service types.

References

CVE Name CVE-2004-0980
Message http://lists.netsys.com/pipermail/full-disclosure/2004-November/028590.html