CVE-2004-0451

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-06 · updated 2026-06-16

Description

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

Affected products

Debian Linux: 3.0
Sup: 1.8

References

http://securitytracker.com/id?1010539
http://www.debian.org/security/2004/dsa-521
http://www.securityfocus.com/bid/10571
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459
http://securitytracker.com/id?1010539
http://www.debian.org/security/2004/dsa-521
http://www.securityfocus.com/bid/10571
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459

Get alerted when CVE-2004-0451 or the next vulnerability affects your stack