CVE-2004-0451: Critical severity SUP SUP vulnerability
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0451?
CVE-2004-0451 is considered high severity due to its potential to allow remote code execution.
How do I fix CVE-2004-0451?
To fix CVE-2004-0451, you should update the affected Software Upgrade Protocol (SUP) to a patched version.
Which software versions are vulnerable to CVE-2004-0451?
CVE-2004-0451 affects Software Upgrade Protocol (SUP) version 1.8 and Debian Linux version 3.0 on various architectures.
What are the consequences of exploiting CVE-2004-0451?
Exploiting CVE-2004-0451 can lead to arbitrary code execution, compromising the integrity of the affected system.
Who is impacted by CVE-2004-0451?
Users and organizations running vulnerable versions of Software Upgrade Protocol (SUP) or Debian Linux version 3.0 are at risk due to CVE-2004-0451.