CVE-2004-1484

Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:socat:socat:1.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:socat:socat:1.4.0.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:51

Type Values Removed Values Added
References () http://secunia.com/advisories/12936/ - Patch, Vendor Advisory () http://secunia.com/advisories/12936/ - Patch, Vendor Advisory
References () http://www.dest-unreach.org/socat/advisory/socat-adv-1.html - Vendor Advisory () http://www.dest-unreach.org/socat/advisory/socat-adv-1.html - Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml - Patch, Vendor Advisory () http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml - Patch, Vendor Advisory
References () http://www.nosystem.com.ar/advisories/advisory-07.txt - Exploit, Patch, Vendor Advisory () http://www.nosystem.com.ar/advisories/advisory-07.txt - Exploit, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/11505 - Exploit, Patch () http://www.securityfocus.com/bid/11505 - Exploit, Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17822 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17822 -

Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03


NVD link : CVE-2004-1484

Mitre link : CVE-2004-1484

CVE.ORG link : CVE-2004-1484


JSON object : View

Products Affected

socat

  • socat