CVE-2004-1192 in UX

Summary

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/13/2004
• Disclosure: 01/10/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-23738
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.05978
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1192
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1192
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1192/