CVE

Id
10997  
CVE No.
CVE-2004-2571  
Status
Candidate  
Description
Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
77204 10997 CVE-2004-2571 BUGTRAQ:20040528 EnderUNIX Security Anouncement (Isoqlog and Spamguard)  View
77205 10997 CVE-2004-2571 URL:http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html  View
77206 10997 CVE-2004-2571 BID:10433  View
77207 10997 CVE-2004-2571 URL:http://www.securityfocus.com/bid/10433  View
77208 10997 CVE-2004-2571 SECTRACK:1010292  View
77209 10997 CVE-2004-2571 URL:http://securitytracker.com/id?1010292  View
77210 10997 CVE-2004-2571 SECUNIA:11741  View
77211 10997 CVE-2004-2571 URL:http://secunia.com/advisories/11741/  View
77212 10997 CVE-2004-2571 XF:isoqlog-multiple-bo(16308)  View

Related JVN