Back
CVE-2004-0450
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
Published: Aug 6, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| log2mail | log2mail | 0.2.2.2 |
| log2mail | log2mail | 0.2.5.0 |
| log2mail | log2mail | 0.2.5.1 |
| log2mail | log2mail | 0.2.5.2 |
GitHub Security Advisory GHSA-rxgx-f27q-r49h
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local...
References (14)
- http://felinemenace.org/~jaguar/advisories/log2mail.txt
- http://osvdb.org/6711
- http://secunia.com/advisories/11768
- http://secunia.com/advisories/11769
- http://www.debian.org/security/2004/dsa-513 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10460 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16311
- http://felinemenace.org/~jaguar/advisories/log2mail.txt
- http://osvdb.org/6711
- http://secunia.com/advisories/11768
- http://secunia.com/advisories/11769
- http://www.debian.org/security/2004/dsa-513 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10460 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16311
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
4.74%
Top 9% most likely to be exploited
Threat Score
41.4 / 100
Data Sources
NVD
EPSS
GitHub