CVE-2004-0980 : Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.

Published 2005-02-09 05:00:00

Updated 2017-07-11 01:30:38

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2004-0980

Debian » Debian Linux » Version: 3.0
cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 PPC Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 S-390 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Mips Edition
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Mipsel Edition
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Alpha Edition
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 ARM Edition
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Hppa Edition
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Sparc Edition
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Ia-64 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 M68k Edition
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 3.0 Ia-32 Edition
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
Matching versions
Gentoo » Linux
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
Matching versions
Angus Mackay » Ez-ipupdate » Version: 3.0.11b5
cpe:2.3:a:angus_mackay:ez-ipupdate:3.0.11b5:*:*:*:*:*:*:*
Matching versions
Angus Mackay » Ez-ipupdate » Version: 3.0.11b8
cpe:2.3:a:angus_mackay:ez-ipupdate:3.0.11b8:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-0980

EPSS FAQ

0.57%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 75 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-0980

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2004-0980

http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml

ez-ipupdate: Format string vulnerability (GLSA 200411-20) — Gentoo security
Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18032

ez-ipupdate show_message format string CVE-2004-0980 Vulnerability Report
http://www.debian.org/security/2004/dsa-592

[SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability
http://www.securityfocus.com/bid/11657

Patch;Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:129

Mandriva
http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html

[Full-Disclosure] Mailing List Charter

Jump to

Vulnerability Details : CVE-2004-0980

Products affected by CVE-2004-0980

Exploit prediction scoring system (EPSS) score for CVE-2004-0980

CVSS scores for CVE-2004-0980

References for CVE-2004-0980