NVD

Id
72641  
Name
CVE-2004-2264  
Description
** DISPUTED ** Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2264  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374571 72641 CVE-2004-2264 20040818 gnu-less Format String Vulnerability  View
374572 72641 CVE-2004-2264 20040818 Re: gnu-less Format String Vulnerability  View
374573 72641 CVE-2004-2264 1010988  View
374574 72641 CVE-2004-2264 less-filename-format-string(17032)  View

Related JVN