CVE-2004-2386: Denis Sbragion Sredird

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.

Affected products

• Denis Sbragion Sredird: version 1.0 only; version 1.1.6 only; version 1.1.7 only; version 1.1.8 only; version 2.0 only; version 2.1 only; …
• Peter Astrand Sercd: version 2.3.0 only

Published 2004-12-31. Last modified 2026-06-16.