Skip to content
Fencer Vulns
high 7.5

CVE-2004-1388 in the critical feed json

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attac…

published 2004-12-31 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-1385

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
68.2%
EPSS 68.2% chance of exploitation in 30 days, percentile 99.3%
public exploits
5
Metasploit, Exploit-DB

Summary

Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.

Patch / fix

  • gpsd Debian 14, Debian 13, Debian 12 2.7-4

debian advisories DEBIAN-CVE-2004-1388

Timeline

  1. Published
  2. First public exploit (EDB-775)

Exploit prediction

68.19% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit exploit/linux/http/gpsd_format_string Berlios GPSD Format String Vulnerability metasploit exploit, average rank, 2005-05-25
  • EDB-16853 Berlios GPSD - Format String (Metasploit) remote, 2010-04-30
  • EDB-10029 Berlios GPSD 1.91-1 < 2.7-2 - Format String remote, 2005-05-25
  • EDB-3099 Berlios GPSD 2.7 - Remote Format String (Metasploit) remote, 2007-01-08
  • EDB-775 Berlios GPSD 2.7.x - Remote Format String remote, 2005-01-26
  • digitalmunition.com http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.