VDB

CVE-2004-0536

CVE-2004-0536 PUBLISHED CVSS 7.199999809265137 HIGH

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

EPSS 0.37% · 29.6th percentile

Risk Scores

CVSS 2.0
7.199999809265137
EPSS Score
0.37%
29.6th percentile

Affected Products

VendorProductVersions
tripwiretripwire2.3.1.2, 2.2.1, 2.3.1
n/an/a*

Timeline

  • Jun 8, 2004 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 16, 2023 EPSS Score
  • May 26, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›