Description
Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | plptools | 0.12-0 | — |
| Debian 13 | plptools | 0.12-0 | — |
| Debian 12 | plptools | 0.12-0 | — |
References
- 20030129 Re: Local root vuln in SuSE 8.0 plptools package mailing-list
- 6715 vdb-entry
- 20030129 Local root vuln in SuSE 8.0 plptools package mailing-list
- plptools-plpnsfd-format-string(11193) vdb-entry