Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LWN.net Weekly Edition for September 4, 2008

The Kernel Hacker's Bookshelf: UNIX Internals

LWN.net Weekly Edition for August 28, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

socat: format string vulnerability

Package(s):

socat

CVE #(s):

Created:

October 25, 2004

Updated:

October 27, 2004

Description:

socat up to version 1.4.0.2 contains a syslog() based format string vulnerability. Further investigation showed that this vulnerability could, under some circumstances, lead to local or remote execution of arbitrary code with the privileges of the socat process. See this socat advisory for additional details.

Alerts:

Gentoo

200410-26

2004-10-25

(Log in to post comments)