Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Max CVSS
10.0
EPSS Score
1.33%
Published
2004-12-06
Updated
2017-07-11
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Max CVSS
4.6
EPSS Score
0.04%
Published
2003-08-27
Updated
2008-09-10
2 vulnerabilities found