CVE-2004-1469: Peter D. Gray Sus

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.

Affected products

• Peter D. Gray Sus: version 2.0 only; version 2.0.1 only

Published 2004-12-31. Last modified 2026-06-16.