CVE-2004-1388: Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0...

Security readout for executives and security teams

CVE-2004-1388 is an old remote-code-execution flaw in BerliOS gpsd, formerly pygps. A network attacker could send specially formed GPS requests that are mishandled when gpsd writes to syslog. The provided sources identify affected versions as 1.9.0 through 2.7, with no CVSS score or confirmed active exploitation. Exposure is most likely on legacy systems still running gpsd or pygps versions 1.9.0 through 2.7, especially if the daemon accepts remote GPS requests. Modern systems are less likely affected, but embedded or long-lived deployments should be checked. Prioritize if legacy gpsd is present and network reachable. The business risk is potentially full compromise of systems running an affected daemon, but urgency depends on whether old gpsd versions still exist in the environment. Mitigation focus: Inventory all hosts running gpsd or pygps.; Replace affected versions 1.9.0 through 2.7 using vendor or distro guidance.; Restrict network access to gpsd where it is still required..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.