CVE-2004-2264

GNU less 358, 381, 382 - Format String Vulnerability via LESSOPEN Environment Variable

Title source: llm

Description

Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/9014

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1010988

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/17032

Third Party Advisory mailing-list x_refsource_fulldisc

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0794.html

Third Party Advisory mailing-list x_refsource_fulldisc

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0811.html

Scores

EPSS 0.0069

EPSS Percentile 71.9%

Details

Status published

Products (3)

gnu/less 358

gnu/less 381

gnu/less 382

Published Dec 31, 2004

Tracked Since Feb 18, 2026