CVE-2004-1484
socat 1.4.0.3 - Remote Code Execution via Format String in Syslog Message
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1484. PoCs published by CoKi.
AI-analyzed exploit summary This exploit targets a format string vulnerability in socat <= 1.4.0.2, leveraging a local exploit to overwrite the .dtors section with shellcode. It uses a format string attack to redirect execution to the shellcode, which spawns a shell.
Description
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
Exploits (1)
This exploit targets a format string vulnerability in socat <= 1.4.0.2, leveraging a local exploit to overwrite the .dtors section with shellcode. It uses a format string attack to redirect execution to the shellcode, which spawns a shell.