CVE-2004-1728

British National Corpus SARA - Remote Buffer Overflow via Long String

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1728. PoCs published by Matthias Bethke.

AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in sarad by sending a crafted payload via netcat to port 7000. The payload consists of a repeated string followed by specific bytes to trigger arbitrary code execution.

Description

Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Matthias Bethke · textdosmultiple
https://www.exploit-db.com/exploits/24386

This exploit leverages a buffer overflow vulnerability in sarad by sending a crafted payload via netcat to port 7000. The payload consists of a repeated string followed by specific bytes to trigger arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: sarad (version not specified)
No auth needed
Prerequisites: Network access to the target on port 7000 · Vulnerable version of sarad running
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17060
Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12348
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10984
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109308454122827&w=2

Scores

EPSS 0.0552
EPSS Percentile 91.9%

Details

Status published
Products (1)
british_national_corpus/sara
Published Aug 20, 2004
Tracked Since Feb 18, 2026