CVE-2004-2386

CVE-2004-2386 describes a format string vulnerability in the LogMsg function of sercd (before 2.3.1) and sredird (2.2.1 and earlier). This flaw allows remote attackers to execute arbitrary code by injecting format string specifiers through the HandleCPCCommand function. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. Despite its age and potential impact, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.