CVE-2002-0501

CVE-2002-0501 describes a format string vulnerability in the log_print() function of Posadis DNS server versions prior to m5pre2. This flaw allows local users, and potentially remote attackers, to execute arbitrary code by injecting malicious format strings into logging messages. With a CVSS score of 7.2, this vulnerability is considered high severity, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity, although it requires local access. While there are no known public exploits or Metasploit modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.