CVE-2004-0623: GNU Gnats

High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days.

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.

Affected products

• GNU Gnats: version 3.0_02 only; version 3.2 only; version 3.14b only; version 3.113 only; version 3.113.1 only; version 3.113.1.6 only; …

Published 2004-12-06. Last modified 2026-06-16.