Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2004-2386

Date: August 15, 2005

Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.

Severity Score

Related Resources (11)

https://nvd.nist.gov/vuln/detail/CVE-2004-2386
http://www.osvdb.org/8375
https://exchange.xforce.ibmcloud.com/vulnerabilities/17056
http://www.osvdb.org/9104
http://www.securityfocus.com/bid/11002
http://secunia.com/advisories/12351
http://www.securityfocus.com/bid/11031
https://security-tracker.debian.org/tracker/CVE-2004-2386
http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd
http://securitytracker.com/id?1011038
https://www.mend.io/vulnerability-database/CVE-2004-2386

Severity Score

Weakness Type (CWE)

Format String Vulnerability

CWE-134

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us