CVE-2004-1388 Memory corruption in n/a
Remote attackers can execute arbitrary code via format string vulnerabilities in the gpsd daemon's syslog reporting function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1388?
CVE-2004-1388 is a high-severity memory corruption vulnerability in n/a, published on 6 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
Which versions are affected by CVE-2004-1388?
It affects 1 product.
Products include Berlios Gps Daemon.
How do I fix CVE-2004-1388?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2004-1388 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-1388 exists.
Public exploit code: 1 Metasploit module and 4 Exploit-DB entries.
Sources
Also known as CVE-2005-0228, DEBIAN-CVE-2004-1388, GHSA-6g3h-vj3c-7f68.