CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute...
CVE-2004-0623 is a high vulnerability (CVSS 10.0) in Gnu Gnats, published June 30, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.49%, the 91st percentile. Fixed in gnats 3.999.beta1+cvs20020303-2.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 4.49%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.999.beta1+cvs20020303-2gnats
Description
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnatsDebian:3.0 | before 3.999.beta1+cvs20020303-2 | 3.999.beta1+cvs20020303-2 |
What each source reports
NVD Score used
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
- Record
CVE-2004-0623- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
- Record
CVE-2004-0623- Updated
- 2026-11-02
EUVDEUVD-2004-0622No score
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
- Record
EUVD-2004-0622- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-694j-gvq7-rqg6No score
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute...
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
- Record
GHSA-694j-gvq7-rqg6- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.