CVE-2004-1916

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

• http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.htmlExploit, Vendor Advisory
• http://marc.info/?l=bugtraq&m=108146376315229&w=2
• http://secunia.com/advisories/11333Exploit, Patch, Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200404-19.xmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/10085Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15814
• http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.htmlExploit, Vendor Advisory
• http://marc.info/?l=bugtraq&m=108146376315229&w=2
• http://secunia.com/advisories/11333Exploit, Patch, Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200404-19.xmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/10085Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15814

Published

Apr 8, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1910rufsi.dll in Symantec Virus Detection allows remote attacker…
• CVE-2004-1911Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2…
• CVE-2004-1912The (1) modules.php, (2) block-Calendar.php, (3) block-Calen…
• CVE-2004-1913Cross-site scripting (XSS) vulnerability in modules.php in N…
• CVE-2004-1914SQL injection vulnerability in modules.php in NukeCalendar 1…
• CVE-2004-1915Buffer overflow in the parse_all_client_messages function in…
• CVE-2004-1917Format string vulnerability in test_func_func in LCDProc 0.4…
• CVE-2004-1918RSniff 1.0 allows remote attackers to cause a denial of serv…
• CVE-2004-1919The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allo…
• CVE-2004-1920X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, a…
• CVE-2004-1921X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1…
• CVE-2004-1922Microsoft Internet Explorer 5.5 and 6.0 allocates memory bas…