CVE-2004-0623: Critical severity GNU GNATS vulnerability
Published Jun 30, 2004
·Updated
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
Affected Software
7 affected components
GNU GNATS=3.0_02
GNU GNATS=3.2
GNU GNATS=3.14b
GNU GNATS=3.113
GNU GNATS=3.113.1
GNU GNATS=3.113.1.6
GNU GNATS=4.0
Remediation
Patch Available
Event History
Jun 30, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0623?
CVE-2004-0623 is classified as a medium severity vulnerability.
2
How do I fix CVE-2004-0623?
To fix CVE-2004-0623, upgrade to a patched version of GNU GNATS that addresses the format string vulnerability.
3
What is the impact of CVE-2004-0623?
The impact of CVE-2004-0623 allows remote attackers to execute arbitrary code on the affected systems via crafted format string specifiers.
4
Which versions of GNU GNATS are affected by CVE-2004-0623?
CVE-2004-0623 affects multiple versions of GNU GNATS including 4.0, 3.113, and earlier versions.
5
Can CVE-2004-0623 be exploited remotely?
Yes, CVE-2004-0623 can be exploited remotely through malicious format strings sent to syslog.