CVE-2004-0623

2004-12-0605:00:00

mitre

web.nvd.nist.gov

cve-2004-0623

format string vulnerability

gnu gnats 4.00

remote code execution

syslog

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.027

Percentile

90.5%

JSON

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.

Affected configurations

Nvd

Node

gnugnatsMatch3.0_02

gnugnatsMatch3.2

gnugnatsMatch3.14b

gnugnatsMatch3.113

gnugnatsMatch3.113.1

gnugnatsMatch3.113.1.6

gnugnatsMatch4.0

VendorProductVersionCPE
gnugnats3.0_02cpe:2.3:a:gnu:gnats:3.0_02:*:*:*:*:*:*:*
gnugnats3.2cpe:2.3:a:gnu:gnats:3.2:*:*:*:*:*:*:*
gnugnats3.14bcpe:2.3:a:gnu:gnats:3.14b:*:*:*:*:*:*:*
gnugnats3.113cpe:2.3:a:gnu:gnats:3.113:*:*:*:*:*:*:*
gnugnats3.113.1cpe:2.3:a:gnu:gnats:3.113.1:*:*:*:*:*:*:*
gnugnats3.113.1.6cpe:2.3:a:gnu:gnats:3.113.1.6:*:*:*:*:*:*:*
gnugnats4.0cpe:2.3:a:gnu:gnats:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	gnats	3.0_02	cpe:2.3:a:gnu:gnats:3.0_02:::::::*
gnu	gnats	3.2	cpe:2.3:a:gnu:gnats:3.2:::::::*
gnu	gnats	3.14b	cpe:2.3:a:gnu:gnats:3.14b:::::::*
gnu	gnats	3.113	cpe:2.3:a:gnu:gnats:3.113:::::::*
gnu	gnats	3.113.1	cpe:2.3:a:gnu:gnats:3.113.1:::::::*
gnu	gnats	3.113.1.6	cpe:2.3:a:gnu:gnats:3.113.1.6:::::::*
gnu	gnats	4.0	cpe:2.3:a:gnu:gnats:4.0:::::::*