Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-1701

high · 10

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

10
CVSS
19.5%
EPSS (exploit prob.)
97th
EPSS percentile
2004-08-09
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
gnucfengine2.0.0
gnucfengine2.0.1
gnucfengine2.0.2
gnucfengine2.0.3
gnucfengine2.0.4
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.6
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.0.8
gnucfengine2.0.8
gnucfengine2.1.0
gnucfengine2.1.0
gnucfengine2.1.0
gnucfengine2.1.7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1701