Vulnerability Details CVE-2004-0980
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.7%
CVSS Severity
CVSS v2 Score 10.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html
- http://secunia.com/advisories/13167/
- http://www.debian.org/security/2004/dsa-592
- http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:129
- http://www.securityfocus.com/bid/11657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18032
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html
- http://secunia.com/advisories/13167/
- http://www.debian.org/security/2004/dsa-592
- http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:129
- http://www.securityfocus.com/bid/11657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18032
Products affected by CVE-2004-0980
-
cpe:2.3:a:angus_mackay:ez-ipupdate:3.0.11b5
-
cpe:2.3:a:angus_mackay:ez-ipupdate:3.0.11b8
-
cpe:2.3:o:debian:debian_linux:3.0
-
cpe:2.3:o:gentoo:linux:-
-
cpe:2.3:o:gentoo:linux:1.2
-
cpe:2.3:o:gentoo:linux:1.4
-
cpe:2.3:o:gentoo:linux:2.1.30
-
cpe:2.3:o:gentoo:linux:2.2.28
-
cpe:2.3:o:gentoo:linux:2.3.30