CVE-2004-1388
BerliOS GPD daemon 1.9.0-2.7 - Remote Code Execution via Format String in GPS Request
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2004-1388.
PoCs published by Metasploit, Enseirb, Yann Senotier, including Metasploit module exploits/linux/http/gpsd_format_string.
AI-analyzed exploit summary This is a Metasploit module exploiting a format string vulnerability in Berlios GPSD server (CVE-2004-1388). It crafts a malicious payload to overwrite memory addresses, leading to remote code execution.
Description
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
Exploits (5)
This is a Metasploit module exploiting a format string vulnerability in Berlios GPSD server (CVE-2004-1388). It crafts a malicious payload to overwrite memory addresses, leading to remote code execution.
This exploit targets a format string vulnerability in Berlios GPSD server (CVE-2004-1388). It crafts a malicious payload to overwrite memory addresses, leading to remote code execution on vulnerable Linux systems.
This exploit targets a format string vulnerability in Berlios GPSD server (CVE-2004-1388) to achieve remote code execution. It leverages a crafted payload with format string specifiers to overwrite memory addresses and execute arbitrary code.
This exploit targets a format string vulnerability in gpsd versions 1.91 to 2.7, allowing remote code execution via a crafted payload. It includes shellcode and brute-force addresses for various Linux distributions.
This Metasploit module exploits a format string vulnerability in Berlios GPSD server (CVE-2004-1388) to achieve remote code execution. It uses a crafted payload with format string specifiers to overwrite memory addresses and execute arbitrary code.