CVE-2004-0451

no score yetEPSS 4.4%

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
Published: 2004-12-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
sup:sup

References

http://securitytracker.com/id?1010539
http://www.debian.org/security/2004/dsa-521
http://www.securityfocus.com/bid/10571
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459
http://securitytracker.com/id?1010539

Check your stack JSON