Vulnerability in Citadel Ux

CVE-2004-1192

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

EPSS: 0.117 (95.6th percentile) — read the EPSS interpretation.

Affected products

  • Citadel Ux — versions 6.07, 6.08, 6.23
  • N/a — versions n/a

References