CVE-2004-2386

Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Weaknesses

CWE-134

Affected products

• Sredird (Denis Sbragion)
• Sercd (Peter Astrand)

References

• http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd
• http://secunia.com/advisories/12351
• http://securitytracker.com/id?1011038
• http://www.osvdb.org/8375
• http://www.osvdb.org/9104
• http://www.securityfocus.com/bid/11002
• http://www.securityfocus.com/bid/11031
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17056