Description
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Ulf Harnhammar · perlremotelinux
https://www.exploit-db.com/exploits/23771
References (4)
Scores
EPSS
0.0624
EPSS Percentile
90.9%
Details
Status
published
Products (5)
gnu/anubis
3.6.0
gnu/anubis
3.6.1
gnu/anubis
3.6.2
gnu/anubis
3.9.92
gnu/anubis
3.9.93
Published
Nov 23, 2004
Tracked Since
Feb 18, 2026