CVE:CVE-2004-0834
CNNVD:CNNVD-200412-088
Speedtouch USB驱动程序1.3.1以前的版本存在格式串漏洞。本地用户借助(1)modem_run， (2)pppoa2，或者(3)pppoa3执行任意代码。
solution:Upgrade mandrakesoft mandrake_multi_network_firewall to a higher version than 8.2,and avoid the version 8.2; Upgrade speedtouch speedtouch_usb_driver to a higher version than 1.0,1.1,1.2,1.2_beta1,1.2_beta2,1.2_beta3,1.3,and avoid the version 1.0,1.1,1.2,1.2_beta1,1.2_beta2,1.2_beta3,1.3; Upgrade gentoo linux to a higher version than 1.4,and avoid the version 1.4; Upgrade mandrakesoft mandrake_linux to a higher version than 8.2,9.0,9.1,9.2,10.0,10.1,and avoid the version 8.2,9.0,9.1,9.2,10.0,10.1; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 2.1,and avoid the version 2.1