CVE-2004-1915 Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
HighCVSS 7.5
EPSS 8.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lcdproc | = 0.3 | No fix listed |
| lcdproc | = 0.4 | No fix listed |
| lcdproc | = 0.4.1_r1 | No fix listed |
| lcdproc | = 4.0 | No fix listed |
| lcdproc | = 4.1 | No fix listed |
| lcdproc | = 4.2 | No fix listed |
| lcdproc | = 4.3 | No fix listed |
| lcdproc | = 4.4 | No fix listed |
| debian/lcdproc(Debian:12) | < 0.4.5 | 0.4.5 |
| debian/lcdproc(Debian:13) | < 0.4.5 | 0.4.5 |
| debian/lcdproc(Debian:14) | < 0.4.5 | 0.4.5 |
References
- Debian Security Tracker CVE-2004-1915 vendor-advisory
- lists.omnipotent.net exploit vendor-advisory
- 20040408 PSR - #2004-001 Remote - LCDProc mailing-list
- 11333 exploit patch third-party-advisory vendor-advisory
- GLSA-200404-19 exploit patch vendor-advisory
- 10085 exploit patch vdb-entry vendor-advisory
- lcdproc-parseallclientmessages-bo(15803) vdb-entry