CVE-2004-1192: Citadel Ux

High severity, CVSS 10.0. EPSS: 11.7% chance of exploitation in the next 30 days.

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

Affected products

• Citadel Ux: version 6.07 only; version 6.08 only; version 6.23 only; version 6.24 only; version 6.26 only; version 6.27 only

Published 2005-01-10. Last modified 2026-06-16.