Vulnerability in Log2mail

CVE-2004-0450

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.

EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.

Affected products

  • Log2mail — versions 0.2.2.2, 0.2.5.0, 0.2.5.1
  • N/a — versions n/a

References