CVE-2004-2026

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.64% chance of exploitation in the next 30 days, 93th percentile

Published

2005-05-10

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24079

References

• CVE Record
• NVD entry

Related

• CVE-2004-2022
• CVE-2004-2028
• CVE-2004-2021
• CVE-2004-2029
• CVE-2004-2018
• CVE-2004-2030