CVEvulnerability
CVE-2004-2386
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-134
Description
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.
Affected configurations
• denis sbragion sredird 1.0
• denis sbragion sredird 1.1.6
• denis sbragion sredird 1.1.7
• denis sbragion sredird 1.1.8
• denis sbragion sredird 2.0
• denis sbragion sredird 2.1
• denis sbragion sredird 2.2
• denis sbragion sredird 2.2.1
• peter astrand sercd 2.3.0
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd cvs.lysator.liu.se
- http://secunia.com/advisories/12351 Vendor Advisory
- http://securitytracker.com/id?1011038 securitytracker.com
- http://www.osvdb.org/8375 Patch
- http://www.osvdb.org/9104 www.osvdb.org
- http://www.securityfocus.com/bid/11002 www.securityfocus.com
- http://www.securityfocus.com/bid/11031 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17056 exchange.xforce.ibmcloud.com
- http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd cvs.lysator.liu.se
- http://secunia.com/advisories/12351 Vendor Advisory
- http://securitytracker.com/id?1011038 securitytracker.com
- http://www.osvdb.org/8375 Patch
- http://www.osvdb.org/9104 www.osvdb.org
- http://www.securityfocus.com/bid/11002 www.securityfocus.com
- http://www.securityfocus.com/bid/11031 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17056 exchange.xforce.ibmcloud.com