CVE-2004-0451

published 2004-12-06

CVE-2004-0451: Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to…

Priority P3 41 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	sup	< sup 1.8-11 (bookworm)	sup 1.8-11 (bookworm)
sup	sup	—	—
sup	sup	>= 0 < 1.8-11	1.8-11
sup	sup	>= 0 < 1.8-11	1.8-11
sup	sup	>= 0 < 1.8-11	1.8-11
sup	sup	>= 0 < 1.8-11	1.8-11

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 10.0 CRITICAL

vendor_debian 10.0 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.