CVEs-PoC/2004/CVE-2004-1900.md

CVE-2004-1900

Description

Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.

POC

Reference

• http://aluigi.altervista.org/adv/igi2fs-adv.txt
• http://aluigi.altervista.org/adv/igi2fs-adv.txt
• http://marc.info/?l=bugtraq&m=108120385811815&w=2
• http://marc.info/?l=bugtraq&m=108120385811815&w=2

Github

No PoCs found on GitHub currently.