← Database

CVE-2004-0536

HIGH CVSS: 7.2 Published: 2004-08-06 Modified: 2026-06-16

Description

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

Affected Platforms

Tripwire Tripwire

Weakness Type

NVD-CWE-Other

References