CVE

Id
10690  
CVE No.
CVE-2004-2264  
Status
Candidate  
Description
** DISPUTED ** Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed.  
Phase
Assigned (20050719)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
74507 10690 CVE-2004-2264 FULLDISC:20040818 Re: gnu-less Format String Vulnerability  View
74508 10690 CVE-2004-2264 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0811.html  View
74509 10690 CVE-2004-2264 FULLDISC:20040818 gnu-less Format String Vulnerability  View
74510 10690 CVE-2004-2264 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0794.html  View
74511 10690 CVE-2004-2264 OSVDB:9014  View
74512 10690 CVE-2004-2264 URL:http://www.osvdb.org/9014  View
74513 10690 CVE-2004-2264 SECTRACK:1010988  View
74514 10690 CVE-2004-2264 URL:http://securitytracker.com/id?1010988  View
74515 10690 CVE-2004-2264 XF:less-filename-format-string(17032)  View

Related JVN