1. CVE-Search
  2. CVE-2004-1484
ID CVE-2004-1484
Summary Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
References
Vulnerable Configurations
  • cpe:2.3:a:socat:socat:1.0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.0.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.0.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.0.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.0.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.0.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.0.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:socat:socat:1.4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:socat:socat:1.4.0.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 11505
confirm http://www.dest-unreach.org/socat/advisory/socat-adv-1.html
gentoo GLSA-200410-26
misc http://www.nosystem.com.ar/advisories/advisory-07.txt
secunia 12936
xf socat-format-string(17822)
Last major update 11-07-2017 - 01:31
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:31
Back to Top