CVE-2005-1100

Greylisting daemon (GLD) 1.3-1.4 - Remote Code Execution via Format String in ErrorLog Function

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1100. PoCs published by Xpl017Elz.

AI-analyzed exploit summary This exploit targets a format string vulnerability in gld 1.4, allowing remote code execution via crafted input. It includes shellcode for a reverse shell and supports multiple Linux distributions.

Description

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Xpl017Elz · cremotelinux

https://www.exploit-db.com/exploits/934

View Code ZIP pw:eip

This exploit targets a format string vulnerability in gld 1.4, allowing remote code execution via crafted input. It includes shellcode for a reverse shell and supports multiple Linux distributions.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: gld 1.4

No auth needed

Prerequisites: Network access to the target service · Target running gld 1.4

MITRE ATT&CK