CVE-2004-1469

2004-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

32.1%

JSON

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.

Affected configurations

Nvd

Node

peter_d._graysusMatch2.0

peter_d._graysusMatch2.0.1

VendorProductVersionCPE
peter_d._graysus2.0cpe:2.3:a:peter_d._gray:sus:2.0:*:*:*:*:*:*:*
peter_d._graysus2.0.1cpe:2.3:a:peter_d._gray:sus:2.0.1:*:*:*:*:*:*:*