CVE-2004-2026

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.64% chance of exploitation in the next 30 days, 94th percentile

Published

2005-05-10

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24079

Security advisories

• http://secunia.com/advisories/11528
• http://security.gentoo.org/glsa/glsa-200405-08.xml
• http://www.securityfocus.com/bid/10267

References

• CVE Record
• NVD entry