CVE-2004-1915

Lcdproc - Buffer Overflow

Title source: rule

Description

Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.

Exploits (1)

exploitdb WORKING POC VERIFIED

by wsxz · perlremotelinux

https://www.exploit-db.com/exploits/23936

View Code ZIP pw:eip

References (6)

[Mailing List] http://marc.info/?l=bugtraq&m=108145722229810&w=2

[Exploit, Vendor Advisory] http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html

[Exploit, Patch, Vendor Advisory] http://security.gentoo.org/glsa/glsa-200404-19.xml

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/15803

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/10085

[Exploit, Patch, Vendor Advisory] http://secunia.com/advisories/11333

Scores

EPSS 0.3809

EPSS Percentile 97.2%

Details

Status published

Products (8)

lcdproc/lcdproc 0.3

lcdproc/lcdproc 0.4

lcdproc/lcdproc 0.4.1_r1

lcdproc/lcdproc 4.0

lcdproc/lcdproc 4.1

lcdproc/lcdproc 4.2

lcdproc/lcdproc 4.3

lcdproc/lcdproc 4.4

Published Apr 08, 2004

Tracked Since Feb 18, 2026