VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Apr 16, 2026

CVE-2004-1192

CVE-2004-1192

Description

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

Affected products

6
  • Citadel/Ux6 versions
    cpe:2.3:a:citadel:ux:6.07:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:citadel:ux:6.07:*:*:*:*:*:*:*
    • cpe:2.3:a:citadel:ux:6.08:*:*:*:*:*:*:*
    • cpe:2.3:a:citadel:ux:6.23:*:*:*:*:*:*:*
    • cpe:2.3:a:citadel:ux:6.24:*:*:*:*:*:*:*
    • cpe:2.3:a:citadel:ux:6.26:*:*:*:*:*:*:*
    • cpe:2.3:a:citadel:ux:6.27:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.