CVE-2005-1100

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

Affected products

Salim Gasmi Gld: 1.3, 1.4

References

http://marc.info/?l=bugtraq&m=111339935903880&w=2
http://secunia.com/advisories/14941
http://security.gentoo.org/glsa/glsa-200504-10.xml
http://securitytracker.com/alerts/2005/Apr/1013678.html
http://www.osvdb.org/15493
https://exchange.xforce.ibmcloud.com/vulnerabilities/20067
http://marc.info/?l=bugtraq&m=111339935903880&w=2
http://secunia.com/advisories/14941
http://security.gentoo.org/glsa/glsa-200504-10.xml
http://securitytracker.com/alerts/2005/Apr/1013678.html
http://www.osvdb.org/15493
https://exchange.xforce.ibmcloud.com/vulnerabilities/20067

Get alerted when CVE-2005-1100 or the next vulnerability affects your stack