Lucene search
MitreCVE-2004-1388HistoryFeb 06, 2005 - 5:00 a.m.
CVE-2004-1388
2005-02-0605:00:00
mitre
web.nvd.nist.gov
35
cve-2004-1388
format string vulnerability
berlios gpd daemon
remote code execution
gps requests
syslog calls.
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.658
Percentile
98.0%
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
Affected configurations
Node
berliosgps_daemonMatch1.9.0
ORberliosgps_daemonMatch1.25
ORberliosgps_daemonMatch1.26
ORberliosgps_daemonMatch1.91
ORberliosgps_daemonMatch1.92
ORberliosgps_daemonMatch1.93
ORberliosgps_daemonMatch1.94
ORberliosgps_daemonMatch1.95
ORberliosgps_daemonMatch1.96
ORberliosgps_daemonMatch1.97
ORberliosgps_daemonMatch1.98
ORberliosgps_daemonMatch2.0
ORberliosgps_daemonMatch2.1
ORberliosgps_daemonMatch2.2
ORberliosgps_daemonMatch2.3
ORberliosgps_daemonMatch2.4
ORberliosgps_daemonMatch2.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| berlios | gps_daemon | 1.9.0 | cpe:2.3:a:berlios:gps_daemon:1.9.0:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.25 | cpe:2.3:a:berlios:gps_daemon:1.25:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.26 | cpe:2.3:a:berlios:gps_daemon:1.26:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.91 | cpe:2.3:a:berlios:gps_daemon:1.91:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.92 | cpe:2.3:a:berlios:gps_daemon:1.92:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.93 | cpe:2.3:a:berlios:gps_daemon:1.93:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.94 | cpe:2.3:a:berlios:gps_daemon:1.94:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.95 | cpe:2.3:a:berlios:gps_daemon:1.95:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.96 | cpe:2.3:a:berlios:gps_daemon:1.96:*:*:*:*:*:*:* |
| berlios | gps_daemon | 1.97 | cpe:2.3:a:berlios:gps_daemon:1.97:*:*:*:*:*:*:* |
Related
nessus
nessus
Berlios gpsd gpsd_report() Function Format String
2005-01-27 00:00:00
cvelist
cvelist
CVE-2004-1388
2005-02-06 05:00:00
nvd
nvd
CVE-2004-1388
2004-12-31 05:00:00
CVE-2005-0228
2005-05-02 04:00:00
packetstorm
packetstorm
Berlios GPSD Format String Vulnerability
2009-10-27 00:00:00
seebug
seebug
Berlios GPSD 1.91-1 - 2.7-2 Format String Vulnerability
2005-05-25 00:00:00
exploitdb
exploitdb
Berlios GPSD 1.91-1 < 2.7-2 - Format String
2005-05-25 00:00:00
Berlios GPSD - Format String (Metasploit)
2010-04-30 00:00:00
Berlios GPSD 2.7 - Remote Format String (Metasploit)
2007-01-08 00:00:00
debiancve
debiancve
CVE-2004-1388
2005-02-06 05:00:00
canvas
canvas
Immunity Canvas: GPSD
2004-12-31 05:00:00
ubuntucve
ubuntucve
CVE-2004-1388
2004-12-31 00:00:00
metasploit
metasploit
Berlios GPSD Format String Vulnerability
2007-12-18 04:39:59
cve
cve
CVE-2005-0228
2005-05-02 04:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.658
Percentile
98.0%
Related for CVE-2004-1388