Vulnerability-Lookup - Search a vulnerability

Vulnerabilites related to berlios - gps_daemon

CVE-2004-1388 (GCVE-0-2004-1388)

Vulnerability from cvelistv5

Published

2005-02-06 05:00

Modified

2024-08-08 00:46

Severity ?

CWE

Summary

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.

References

▼	URL	Tags
	http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html	mailing-list, x_refsource_MLIST
	http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt	x_refsource_MISC
	https://exchange.xforce.ibmcloud.com/vulnerabilities/19079	vdb-entry, x_refsource_XF
	http://marc.info/?l=bugtraq&m=110677341711505&w=2	mailing-list, x_refsource_BUGTRAQ
	http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:46:12.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[Gpsd-announce] 20050127 Announcing release 2.8 of gpsd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt"
          },
          {
            "name": "gpsd-format-string(19079)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19079"
          },
          {
            "name": "20050126 DMA[2005-0125a] - \u0027berlios gpsd format string vulnerability\u0027",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=110677341711505\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-01-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[Gpsd-announce] 20050127 Announcing release 2.8 of gpsd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt"
        },
        {
          "name": "gpsd-format-string(19079)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19079"
        },
        {
          "name": "20050126 DMA[2005-0125a] - \u0027berlios gpsd format string vulnerability\u0027",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=110677341711505\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-1388",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Gpsd-announce] 20050127 Announcing release 2.8 of gpsd",
              "refsource": "MLIST",
              "url": "http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html"
            },
            {
              "name": "http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt",
              "refsource": "MISC",
              "url": "http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt"
            },
            {
              "name": "gpsd-format-string(19079)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19079"
            },
            {
              "name": "20050126 DMA[2005-0125a] - \u0027berlios gpsd format string vulnerability\u0027",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=110677341711505\u0026w=2"
            },
            {
              "name": "http://www.mail-archive.com/debian-bugs-closed@lists.debian.org/msg02103.html",
              "refsource": "CONFIRM",
              "url": "http://www.mail-archive.com/debian-bugs-closed@lists.debian.org/msg02103.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-1388",
    "datePublished": "2005-02-06T05:00:00",
    "dateReserved": "2005-01-31T00:00:00",
    "dateUpdated": "2024-08-08T00:46:12.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd