CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

10.99% chance of exploitation in the next 30 days, 96th percentile

Published

2005-04-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/934

References

• CVE Record
• NVD entry

Related

• CVE-2005-1099
• CVE-2005-1102
• CVE-2005-1098
• CVE-2005-1104
• CVE-2005-1097
• CVE-2005-1105