CVE-2004-1915
published 2004-04-08CVE-2004-1915: Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
8.68%
94.5th percentile
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | lcdproc | < lcdproc 0.4.5 (bookworm) | lcdproc 0.4.5 (bookworm) |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | — | — |
| lcdproc | lcdproc | >= 0 < 0.4.5 | 0.4.5 |
| lcdproc | lcdproc | >= 0 < 0.4.5 | 0.4.5 |
| lcdproc | lcdproc | >= 0 < 0.4.5 | 0.4.5 |
| lcdproc | lcdproc | >= 0 < 0.4.5 | 0.4.5 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2004-1915: lcdproc - Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to...
vendor_debian·2004·CVSS 7.5
CVE-2004-1915 [HIGH] CVE-2004-1915: lcdproc - Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to...
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
Scope: local
bookworm: resolved (fixed in 0.4.5)
bullseye: resolved (fixed in 0.4.5)
forky: resolved (fixed in 0.4.5)
sid: resolved (fixed in 0.4.5)
trixie: resolved (fixed in 0.4.5)
GHSA
GHSA-v4w2-7m6f-rxm5: Buffer overflow in the parse_all_client_messages function in LCDproc 0
ghsa_unreviewed·2022-04-29
CVE-2004-1915 [HIGH] GHSA-v4w2-7m6f-rxm5: Buffer overflow in the parse_all_client_messages function in LCDproc 0
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
OSV
CVE-2004-1915: Buffer overflow in the parse_all_client_messages function in LCDproc 0
osv·2004-04-08·CVSS 7.5
CVE-2004-1915 [HIGH] CVE-2004-1915: Buffer overflow in the parse_all_client_messages function in LCDproc 0
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
No detection rules found.
No writeups or analysis indexed.
http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.htmlhttp://marc.info/?l=bugtraq&m=108145722229810&w=2http://secunia.com/advisories/11333http://security.gentoo.org/glsa/glsa-200404-19.xmlhttp://www.securityfocus.com/bid/10085https://exchange.xforce.ibmcloud.com/vulnerabilities/15803http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.htmlhttp://marc.info/?l=bugtraq&m=108145722229810&w=2http://secunia.com/advisories/11333http://security.gentoo.org/glsa/glsa-200404-19.xmlhttp://www.securityfocus.com/bid/10085https://exchange.xforce.ibmcloud.com/vulnerabilities/15803
2004-04-08
Published