vulnwire
7.5high

CVE-2004-1388in critical feed5 exploits

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attac…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
68.2%
percentile 99%
Public exploits
5
Metasploit · Exploit-DB

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.

Exploit prediction (EPSS)

68.19% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/linux/http/gpsd_format_string Berlios GPSD Format String Vulnerability · metasploit exploit, average rank · 2005-05-25
  • EDB-775 Berlios GPSD 2.7.x - Remote Format String · remote · 2005-01-26
  • EDB-3099 Berlios GPSD 2.7 - Remote Format String (Metasploit) · remote · 2007-01-08
  • EDB-16853 Berlios GPSD - Format String (Metasploit) · remote · 2010-04-30
  • EDB-10029 Berlios GPSD 1.91-1 < 2.7-2 - Format String · remote · 2005-05-25

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • lists.berlios.de /pipermail/gpsd-announce/2005-January/000018.html · mailing-list, x_refsource_MLIST, x_transferred
  • digitalmunition.com /DMA%5B2005-0125a%5D.txt · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/19079 · vdb-entry, x_refsource_XF, x_transferred
  • marc.info /?l=bugtraq&m=110677341711505&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • mail-archive.com /debian-bugs-closed%40lists.debian.org/msg02103.html · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.