Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1214
cve-2004-1214
format string vulnerability
kreed 1.05
remote code execution
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
Low
0.028 Low
EPSS
Percentile
90.8%
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.
Affected configurations
Node
burutkreedMatch1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| burut:kreed | burut kreed | eq | 1.5 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
Low
0.028 Low
EPSS
Percentile
90.8%
Related for CVE-2004-1214