CVE-2004-1793

YaSoft Switch Off <= 2.3 - Authenticated Stack-Based Buffer Overflow via SendMsg Action

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1793. PoCs published by MrNice.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in YaSoft Switch Off 2.3 by sending an excessively long 'message' parameter to the application, allowing remote code execution. It includes a reverse shell payload and supports both Windows 2000 and XP targets.

Description

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.

Exploits (1)

exploitdb WORKING POC VERIFIED
by MrNice · cremotewindows
https://www.exploit-db.com/exploits/23509

This exploit targets a buffer overflow vulnerability in YaSoft Switch Off 2.3 by sending an excessively long 'message' parameter to the application, allowing remote code execution. It includes a reverse shell payload and supports both Windows 2000 and XP targets.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: YaSoft Switch Off 2.3
Auth required
Prerequisites: Network access to the target · Target software running on port 8000 · Authentication if password is set
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9340
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14124
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3309
Exploit x_refsource_misc
http://www.elitehaven.net/switchoff.txt
Exploit mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/348693
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1008581
Exploit third-party-advisory x_refsource_secunia
http://secunia.com/advisories/10521

Scores

EPSS 0.0583
EPSS Percentile 92.2%

Details

Status published
Products (16)
yatsoft/switch_off 0.7
yatsoft/switch_off 1.0
yatsoft/switch_off 1.1
yatsoft/switch_off 1.2
yatsoft/switch_off 1.3
yatsoft/switch_off 1.4
yatsoft/switch_off 1.5
yatsoft/switch_off 1.5.1
yatsoft/switch_off 1.6
yatsoft/switch_off 1.7
... and 6 more
Published Dec 31, 2004
Tracked Since Feb 18, 2026