CVE-2004-0354
First published: Thu Mar 18 2004(Updated: )
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Anubis | =3.9.92 | |
| GNU Anubis | =3.9.93 | |
| GNU Anubis | =3.6.0 | |
| GNU Anubis | =3.6.1 | |
| GNU Anubis | =3.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0354?
CVE-2004-0354 is classified as a critical vulnerability due to the potential for remote attackers to execute arbitrary code.
Which versions of GNU Anubis are affected by CVE-2004-0354?
CVE-2004-0354 affects GNU Anubis versions 3.6.0 through 3.6.2, as well as 3.9.92 and 3.9.93.
How do I fix CVE-2004-0354?
To fix CVE-2004-0354, upgrade GNU Anubis to a version that is not vulnerable, such as any release after 3.9.93.
What types of vulnerabilities does CVE-2004-0354 include?
CVE-2004-0354 includes multiple format string vulnerabilities in various functions of GNU Anubis.
Can CVE-2004-0354 be exploited remotely?
Yes, CVE-2004-0354 can be exploited remotely via specially crafted format string specifiers.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/remedy
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/gnu
- canonical/gnu anubis
- version/gnu anubis/3.9.92
- version/gnu anubis/3.9.93
- version/gnu anubis/3.6.0
- version/gnu anubis/3.6.1
- version/gnu anubis/3.6.2