VULNERABILITY INTELLIGENCE

CVE-2004-2386

CVSS score7.5 HIGH
EPSS probability3.21%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references