CVE-2004-1214 Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.
HighCVSS 10.0
EPSS 6.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| burut kreed | = 1.5 | No fix listed |
References
- 20041202 Multiple vulnerabilities in Kreed 1.05 mailing-list
- 11799 exploit vdb-entry vendor-advisory
- kreed-message-nickname-format-string(18343) vdb-entry