CVE-2004-0354

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-11-23 · updated 2026-06-16

Description

Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

Affected products

GNU Anubis: 3.6.0, 3.6.1, 3.6.2, 3.9.92, 3.9.93

References

http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
http://marc.info/?l=bugtraq&m=107843915424588&w=2
http://www.securityfocus.com/bid/9772
https://exchange.xforce.ibmcloud.com/vulnerabilities/15346
http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
http://marc.info/?l=bugtraq&m=107843915424588&w=2
http://www.securityfocus.com/bid/9772
https://exchange.xforce.ibmcloud.com/vulnerabilities/15346

Get alerted when CVE-2004-0354 or the next vulnerability affects your stack