← Vulnerability feed

Vulnerability record · CVE-2004-1701 · published 9 August 2004

CVE-2004-1701: Gnu cfengine vulnerability

Gnu · Cfengine

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

10.0 CVSS 2.0 High EPSS 20% · top 2.7%
10.0CVSS 2.0 base score
20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 6 tagged exploit
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=109208394910086&w=2
http://marc.info/?l=bugtraq&m=110886670528775&w=2
http://secunia.com/advisories/12251 PatchVendor Advisory
http://security.gentoo.org/glsa/glsa-200408-08.xml ExploitPatchVendor Advisory
http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/10899 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16935
http://marc.info/?l=bugtraq&m=109208394910086&w=2
http://marc.info/?l=bugtraq&m=110886670528775&w=2
http://secunia.com/advisories/12251 PatchVendor Advisory
http://security.gentoo.org/glsa/glsa-200408-08.xml ExploitPatchVendor Advisory
http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/10899 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16935

Track CVE-2004-1701 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2000-0947Gnu cfengine vulnerabilityFormat string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the…EPSS 2.5%7.5CVE-2003-0849Gnu cfengine vulnerabilityBuffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length val…EPSS 11%5.0CVE-2004-1702Gnu cfengine vulnerabilityThe AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction funct…EPSS 2.4%2.1CVE-2005-2960Gnu cfengine vulnerabilitycfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulner…EPSS 0.43%2.1CVE-2005-3137Gnu cfengine vulnerabilityThe (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary file…EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2004-1701), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.