CVE-2004-0353: Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and...

Security readout for executives and security teams

CVE-2004-0353 is an old GNU Anubis flaw where overly long remote input could overflow buffers in authentication handling. If a vulnerable Anubis instance is reachable, the business risk is unauthorized privilege gain on that host. The source bundle does not provide CVSS, CPEs, or a named fixed version. Exposure is likely limited to organizations still running the listed GNU Anubis versions, especially where the service is reachable by untrusted networks. The bundle lists no CPEs, default ports, package names, or supported platform details, so asset confirmation must be local. Treat confirmed internet-reachable vulnerable Anubis as urgent because the described impact is remote privilege gain. For most environments, priority depends on whether this legacy software exists; first step is rapid inventory rather than broad emergency action. Mitigation focus: Confirm whether GNU Anubis is present and whether listed versions are running.; Review the GNU Anubis security update and apply vendor-recommended fixes.; Remove or isolate vulnerable legacy instances if no supported fix is available..

Prepared

Jun 30, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.