CVE-2004-2026

Pound <= 1.5 - Remote Code Execution via Format String in Logmsg Function

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2026. PoCs published by Nilanjan De.

AI-analyzed exploit summary This exploit targets a remote format string vulnerability in APSIS Pound <=1.5, allowing arbitrary code execution via crafted requests. It includes shellcode for a fork+portbind shell on port 31337 and supports both local and remote exploitation.

Description

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Nilanjan De · cremotelinux

https://www.exploit-db.com/exploits/24079

View Code ZIP pw:eip

This exploit targets a remote format string vulnerability in APSIS Pound <=1.5, allowing arbitrary code execution via crafted requests. It includes shellcode for a fork+portbind shell on port 31337 and supports both local and remote exploitation.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: APSIS Pound <=1.5

No auth needed

Prerequisites: Network access to the target · Pound running on port 8888 (default)

MITRE ATT&CK