CVE-2004-0536 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-0536
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0536

Description: Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/16309 REDHAT http://www.redhat.com/support/errata/RHSA-2004-244.html GENTOO http://security.gentoo.org/glsa/glsa-200406-02.xml BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=108630983009228&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=108627481507249&w=2 BID 10454

Return to the previous page.