CVE-2004-0601: Distcc

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.

Affected products

• Distcc Distcc: version 2.7 only; version 2.9 only; version 2.10 only; version 2.11 only; version 2.12 only; version 2.13 only; …

Published 2004-12-23. Last modified 2026-06-16.