Unscored severity · published May 2, 2005
CVE-2005-1100
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string…
–
CVSS
11%
EPSS
No
On KEV
Description
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.0% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GL
Gld · Salim Gasmi
1.3; 1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1100
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1100
marc.info
http://marc.info/?l=bugtraq&m=111339935903880&w=2
Patch
http://secunia.com/advisories/14941
Patch
http://security.gentoo.org/glsa/glsa-200504-10.xml
securitytracker.com
http://securitytracker.com/alerts/2005/Apr/1013678.html
www.osvdb.org
http://www.osvdb.org/15493
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20067
More from Gld
–
CVE-2005-1099
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to…