What’s Vulnerable › Vulnerabilities

CVE-2004-2571

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-31 · updated 2026-06-16

Description

Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.

Affected products

• Enderunix Isoqlog: 2.1.1, 2.2_beta

References

• http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html
• http://secunia.com/advisories/11741/
• http://securitytracker.com/id?1010292
• http://www.securityfocus.com/bid/10433
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16308
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html
• http://secunia.com/advisories/11741/
• http://securitytracker.com/id?1010292
• http://www.securityfocus.com/bid/10433
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16308

Get alerted when CVE-2004-2571 or the next vulnerability affects your stack