CVE-2004-2264

GNU less versions 358–382 contain a format-string bug in the open_altfile function (filename.c) that may allow local users to cause a denial of service or possibly execute arbitrary code via the LESSOPEN environment variable. The PT-2004-3159 advisory notes this is not a vulnerability unless priv...

CVE-2004-2264

Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...

PT-2004-3159 · Gnu · Gnu Less

Name of the Vulnerable Software and Affected Versions: GNU less versions 358 through 382 Description: A format string bug in the open altfile function in filename.c might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environme...