CVE-2004-2387

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code.

Affected products

Denis Sbragion Sredird: 1.0, 1.1.6, 1.1.7, 1.1.8, 2.0, 2.1 (+2)
Peter Astrand Sercd: 2.3.0

References

http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd
http://secunia.com/advisories/12351
http://securitytracker.com/id?1011038
http://www.osvdb.org/9100
http://www.securityfocus.com/bid/11002
http://www.securityfocus.com/bid/11033
https://exchange.xforce.ibmcloud.com/vulnerabilities/17059
http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd
http://secunia.com/advisories/12351
http://securitytracker.com/id?1011038
http://www.osvdb.org/9100
http://www.securityfocus.com/bid/11002

Get alerted when CVE-2004-2387 or the next vulnerability affects your stack