Vulnerability in Berlios Gps Daemon
CVE-2004-1388
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
EPSS: 0.682 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Berlios Gps_daemon — versions 1.9.0, 1.25, 1.26
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2004-1388?
- CVE-2004-1388 is a vulnerability in Berlios Gps Daemon. Published 2004-12-31.
- Is CVE-2004-1388 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.