CVE-2004-2026: High severity APSIS Pound vulnerability
Published Dec 31, 2004
·Updated
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.
Affected Software
6 affected components
APSIS Pound=1.2
APSIS Pound=1.5
APSIS Pound=1.0
APSIS Pound=1.4
APSIS Pound=1.3
APSIS Pound=1.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2026?
CVE-2004-2026 has a critical severity level as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2004-2026?
To fix CVE-2004-2026, upgrade Pound to version 1.6 or later where this vulnerability is addressed.
3
What software versions are affected by CVE-2004-2026?
CVE-2004-2026 affects Pound versions 1.0 through 1.5 inclusive.
4
Can CVE-2004-2026 lead to data loss?
Yes, CVE-2004-2026 can lead to data loss as it allows attackers to execute arbitrary code on the affected system.
5
Is CVE-2004-2026 a local or remote vulnerability?
CVE-2004-2026 is a remote vulnerability that allows remote attackers to exploit the system.