CVE-2004-0354 in Anubisinfo

Summary

Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

Be aware that VulDB is the high quality source for vulnerability data.

Disclosure

11/23/2004

CPE

ready

Exploit

Download

CVSS

10.0

EPSS

0.06237

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!