CVE-2004-1002

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.

• CWE-191

• http://www.securityfocus.com/archive/1/379450Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17874Third Party Advisory, VDB Entry
• https://www.ubuntu.com/usn/usn-12-1/Third Party Advisory
• http://www.securityfocus.com/archive/1/379450Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17874Third Party Advisory, VDB Entry
• https://www.ubuntu.com/usn/usn-12-1/Third Party Advisory

Published

Mar 1, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0996main.c in cscope 15-4 and 15-5 creates temporary files with …
• CVE-2004-0997Unspecified vulnerability in the ptrace MIPS assembly code i…
• CVE-2004-0998Format string vulnerability in telnetd-ssl 0.17 and earlier …
• CVE-2004-0999zgv 5.5.3 allows remote attackers to cause a denial of servi…
• CVE-2004-1000lintian 1.23 and earlier removes the working directory even …
• CVE-2004-1001Unknown vulnerability in the passwd_check function in Shadow…
• CVE-2004-1003Trend ScanMail allows remote attackers to obtain potentially…
• CVE-2004-1004Multiple format string vulnerabilities in Midnight Commander…
• CVE-2004-1005Multiple buffer overflows in Midnight Commander (mc) 4.5.55 …
• CVE-2004-1006Format string vulnerability in the log functions in dhcpd fo…
• CVE-2004-1007The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 …
• CVE-2004-1008Integer signedness error in the ssh2_rdpkt function in PuTTY…