CVE-2004-0353

GNU Anubis <3.9.93 - Buffer Overflow

Title source: llm

Description

Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.

Exploits (1)

exploitdb WORKING POC VERIFIED

by CMN · cremotelinux

https://www.exploit-db.com/exploits/23772

View Code ZIP pw:eip

References (5)

[Various Sources] http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html

[Mailing List] http://marc.info/?l=bugtraq&m=107894315012081&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=107843915424588&w=2

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/9772

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/15345

Scores

EPSS 0.0901

EPSS Percentile 92.6%

Details

Status published

Products (5)

gnu/anubis 3.6.0

gnu/anubis 3.6.1

gnu/anubis 3.6.2

gnu/anubis 3.9.92

gnu/anubis 3.9.93

Published Nov 23, 2004

Tracked Since Feb 18, 2026