DEBIAN-CVE-2004-2687

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2004-2687
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2687.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2004-2687
Upstream
Published
2004-12-31T05:00:00Z
Modified
2025-11-19T01:01:55.684365Z
Summary
[none]
Details

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.

References

Affected packages

Debian:11 / distcc

Package

Name
distcc
Purl
pkg:deb/debian/distcc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.18.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2687.json"

Debian:12 / distcc

Package

Name
distcc
Purl
pkg:deb/debian/distcc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.18.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2687.json"

Debian:13 / distcc

Package

Name
distcc
Purl
pkg:deb/debian/distcc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.18.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2687.json"

Debian:14 / distcc

Package

Name
distcc
Purl
pkg:deb/debian/distcc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.18.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2687.json"