CVE

Id
10949  
CVE No.
CVE-2004-2523  
Status
Candidate  
Description
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument.  
Phase
Assigned (20051025)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76697 10949 CVE-2004-2523 BUGTRAQ:20040729 [VSA0402] OpenFTPD format string vulnerability  View
76698 10949 CVE-2004-2523 URL:http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html  View
76699 10949 CVE-2004-2523 BUGTRAQ:20040803 EXPLOIT for Re: [VSA0402] OpenFTPD format string vulnerability  View
76700 10949 CVE-2004-2523 URL:http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html  View
76701 10949 CVE-2004-2523 CONFIRM:http://www.openftpd.org:9673/openftpd  View
76702 10949 CVE-2004-2523 BID:10830  View
76703 10949 CVE-2004-2523 URL:http://www.securityfocus.com/bid/10830  View
76704 10949 CVE-2004-2523 OSVDB:8261  View
76705 10949 CVE-2004-2523 URL:http://www.osvdb.org/8261  View
76706 10949 CVE-2004-2523 SECTRACK:1010823  View
76707 10949 CVE-2004-2523 URL:http://securitytracker.com/id?1010823  View
76708 10949 CVE-2004-2523 SECUNIA:12174  View
76709 10949 CVE-2004-2523 URL:http://secunia.com/advisories/12174  View
76710 10949 CVE-2004-2523 XF:openftpd-ncftpformat-string(16843)  View

Related JVN