CVE-2004-1192

Citadel/UX <6.27 - RCE

Title source: llm

Description

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

Exploits (1)

exploitdb WORKING POC VERIFIED

by CoKi · cremotelinux

https://www.exploit-db.com/exploits/681

View Code ZIP pw:eip

References (4)

[Mailing List] http://marc.info/?l=bugtraq&m=110304986223400&w=2

[Various Sources] http://www.nosystem.com.ar/advisories/advisory-09.txt

[Mailing List] http://marc.info/?l=bugtraq&m=110295469430696&w=2

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/18429

Scores

EPSS 0.0598

EPSS Percentile 90.7%

Details

Status published

Products (6)

citadel/ux 6.07

citadel/ux 6.08

citadel/ux 6.23

citadel/ux 6.24

citadel/ux 6.26

citadel/ux 6.27

Published Jan 10, 2005

Tracked Since Feb 18, 2026