« Volver al listado

CVE-2004-0450

Estado: ModificadaAlta (10)—

Vulnerabilidad de cadena de formato en la función printlog en log2mail 0.2.5.2 permite a usuarios locales o a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en un fichero de log monitorizado por log2mail.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Log2mail — Log2mail

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0450",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-08-06T04:00:00.000",
  "references": [
    {
      "url": "http://felinemenace.org/~jaguar/advisories/log2mail.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/6711",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11768",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11769",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2004/dsa-513",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/10460",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16311",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://felinemenace.org/~jaguar/advisories/log2mail.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/6711",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/11768",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/11769",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2004/dsa-513",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/10460",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16311",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de cadena de formato en la función printlog en log2mail 0.2.5.2 permite a usuarios locales o a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en un fichero de log monitorizado por log2mail."
    }
  ],
  "lastModified": "2026-06-16T22:05:39.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:log2mail:log2mail:0.2.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FF1138A-BCBA-4359-A795-CFC91A2CE8E7"
            },
            {
              "criteria": "cpe:2.3:a:log2mail:log2mail:0.2.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDCC9A70-6036-4005-9BF8-92A273F6F27D"
            },
            {
              "criteria": "cpe:2.3:a:log2mail:log2mail:0.2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C5ED810-4303-42E7-94D7-312E1CFD9987"
            },
            {
              "criteria": "cpe:2.3:a:log2mail:log2mail:0.2.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EEFADA3-367A-468F-AC4B-A826EB577F7D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}