Vulnerability Details CVE-2004-0353
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 88.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
- http://marc.info/?l=bugtraq&m=107843915424588&w=2
- http://marc.info/?l=bugtraq&m=107894315012081&w=2
- http://www.securityfocus.com/bid/9772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15345
- http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
- http://marc.info/?l=bugtraq&m=107843915424588&w=2
- http://marc.info/?l=bugtraq&m=107894315012081&w=2
- http://www.securityfocus.com/bid/9772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15345
Products affected by CVE-2004-0353
-
cpe:2.3:a:gnu:anubis:3.6.0
-
cpe:2.3:a:gnu:anubis:3.6.1
-
cpe:2.3:a:gnu:anubis:3.6.2
-
cpe:2.3:a:gnu:anubis:3.9.92
-
cpe:2.3:a:gnu:anubis:3.9.93