CVE-2004-2571
Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine,…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.27% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- enderunix/isoqlog
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html
- http://secunia.com/advisories/11741/Patch, Vendor Advisory
- http://securitytracker.com/id?1010292Patch
- http://www.securityfocus.com/bid/10433Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16308
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html
- http://secunia.com/advisories/11741/Patch, Vendor Advisory
- http://securitytracker.com/id?1010292Patch
- http://www.securityfocus.com/bid/10433Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16308
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.