Vulnerability Description
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mandrakesoft | Mandrake Multi Network Firewall | 8.2 |
| Speedtouch | Speedtouch Usb Driver | 1.0 |
| Gentoo | Linux | 1.4 |
| Mandrakesoft | Mandrake Linux | 8.2 |
| Mandrakesoft | Mandrake Linux Corporate Server | 2.1 |
References
- http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&rel
- http://speedtouch.sourceforge.net/index.php?/news.en.htmlVendor Advisory
- http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17792
- http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&rel
- http://speedtouch.sourceforge.net/index.php?/news.en.htmlVendor Advisory
- http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17792
FAQ
What is CVE-2004-0834?
CVE-2004-0834 is a vulnerability with a CVSS score of 7.2 (HIGH). Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
How severe is CVE-2004-0834?
CVE-2004-0834 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-0834?
Check the references section above for vendor advisories and patch information. Affected products include: Mandrakesoft Mandrake Multi Network Firewall, Speedtouch Speedtouch Usb Driver, Gentoo Linux, Mandrakesoft Mandrake Linux, Mandrakesoft Mandrake Linux Corporate Server.