CVE catalog

CVE-2004-2571

isoqlog: CVE-2004-2571

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
3.27% · Oct 25, 2026

Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianisoqlogsid2.2.1-11fixed
Debianisoqlogforky2.2.1-11fixed
Debianisoqlogtrixie2.2.1-10fixed
Debianisoqlogbookworm2.2.1-9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianisoqlogsourcesid2.2-0.1not yet assignedNot reportedNot reported
Debianisoqlogsourceforky2.2-0.1not yet assignedNot reportedNot reported
Debianisoqlogsourcetrixie2.2-0.1not yet assignedNot reportedNot reported
Debianisoqlogsourcebookworm2.2-0.1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [isoqlog]Fixed
    Details (2)
    • 2.2.1-9.1 · amd64 · bookworm

      Fixed · Fixed: 2.2-0.1

      dsa · isoqlog · debian · bookworm; dsa · isoqlog · debian · 12

    • 2.2.1-9.1 · arm64 · bookworm

      Fixed · Fixed: 2.2-0.1

      dsa · isoqlog · debian · bookworm; dsa · isoqlog · debian · 12

[Debian 13 (Trixie)]

  • [isoqlog]Fixed
    Details (2)
    • 2.2.1-10 · amd64 · trixie

      Fixed · Fixed: 2.2-0.1

      dsa · isoqlog · debian · 13

    • 2.2.1-10 · arm64 · trixie

      Fixed · Fixed: 2.2-0.1

      dsa · isoqlog · debian · 13

Observed:

References