CVE-2005-1100 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 11% (pctl 96)
Patch early
A public exploit exists.
Description
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 10.99% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-05-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| salim gasmi | gld |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | gld 1.4 - Postfix Greylisting Daemon Remote Format String | 2005-04-13 |
References
- http://marc.info/?l=bugtraq&m=111339935903880&w=2
- http://secunia.com/advisories/14941
- http://security.gentoo.org/glsa/glsa-200504-10.xml
- http://securitytracker.com/alerts/2005/Apr/1013678.html
- http://www.osvdb.org/15493
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20067
- http://marc.info/?l=bugtraq&m=111339935903880&w=2
- http://secunia.com/advisories/14941
- http://security.gentoo.org/glsa/glsa-200504-10.xml
- http://securitytracker.com/alerts/2005/Apr/1013678.html
- http://www.osvdb.org/15493
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20067
→ the Explorer · watch your stack · NVD