CVE-2004-2523 - Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument

Back Back to CVE browser

MEDIUM

Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument

Published Oct 25, 2005

6.5

MEDIUM

CVSS 2.0

EPSS 5.40%

Description

Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html
mailing-listx_refsource_BUGTRAQPatch
http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html
mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/12174
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1010823
vdb-entryx_refsource_SECTRACKExploitPatch
http://www.openftpd.org:9673/openftpd
x_refsource_CONFIRM
http://www.osvdb.org/8261
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/10830
vdb-entryx_refsource_BIDExploitPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2514
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16843
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html		mailing-listx_refsource_BUGTRAQPatch
http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html		mailing-listx_refsource_BUGTRAQExploit
http://secunia.com/advisories/12174		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1010823		vdb-entryx_refsource_SECTRACKExploitPatch
http://www.openftpd.org:9673/openftpd		x_refsource_CONFIRM
http://www.osvdb.org/8261		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/10830		vdb-entryx_refsource_BIDExploitPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2514		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16843		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 25, 2005

Updated Aug 8, 2024

Reserved Oct 25, 2005

Link CVE-2004-2523

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-2523

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 25, 2005

Updated Aug 8, 2024

Link EUVD-2004-2514

GitHub

No data