CVE-2004-1916

CVE-2004-1916 describes multiple buffer overflow vulnerabilities in LCDProc versions 0.4.1 through 0.4.4. These flaws allow remote attackers to execute arbitrary code by sending a long invalid command to the parse_all_client_messages function or a long argv command to the test_func_func function. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No) and no known public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.