CVE-2004-1388 Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests conta...
HighCVSS 7.5
EPSS 68.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| berlios gps daemon | = 1.9.0 | No fix listed |
| berlios gps daemon | = 1.25 | No fix listed |
| berlios gps daemon | = 1.26 | No fix listed |
| berlios gps daemon | = 1.91 | No fix listed |
| berlios gps daemon | = 1.92 | No fix listed |
| berlios gps daemon | = 1.93 | No fix listed |
| berlios gps daemon | = 1.94 | No fix listed |
| berlios gps daemon | = 1.95 | No fix listed |
| berlios gps daemon | = 1.96 | No fix listed |
| berlios gps daemon | = 1.97 | No fix listed |
| berlios gps daemon | = 1.98 | No fix listed |
| berlios gps daemon | = 2.0 | No fix listed |
| berlios gps daemon | = 2.1 | No fix listed |
| berlios gps daemon | = 2.2 | No fix listed |
| berlios gps daemon | = 2.3 | No fix listed |
| berlios gps daemon | = 2.4 | No fix listed |
| berlios gps daemon | = 2.7 | No fix listed |
| debian/gpsd(Debian:12) | < 2.7-4 | 2.7-4 |
| debian/gpsd(Debian:13) | < 2.7-4 | 2.7-4 |
| debian/gpsd(Debian:14) | < 2.7-4 | 2.7-4 |
References
- Debian Security Tracker CVE-2004-1388 vendor-advisory
- [Gpsd-announce] 20050127 Announcing release 2.8 of gpsd mailing-list patch
- 20050126 DMA[2005-0125a] - 'berlios gpsd format string vulnerability' mailing-list
- www.digitalmunition.com exploit
- www.mail-archive.com
- gpsd-format-string(19079) vdb-entry