Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2004-1542: Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of se

45
This month
MEDIUM 5.0DOWNGRADE

CVE-2004-1542 is a medium-severity flaw (CVSS 5.0) affecting soldier of fortune. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply.

Why this priority

  • Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score5.0 (Medium)
EPSS exploit chance3.5% (top 11%)
CISA exploited listNo
Published2004-12-31
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: raven software

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

raven software soldier of fortune DOWNGRADE
Affected: 2.1.0.2 · 2.1.0.3
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.1.0.2
1. Check installed version
apt-cache policy soldier-of-fortune || rpm -q soldier-of-fortune || soldier-of-fortune --version
2. No fixed release: DOWNGRADE to a release before 2.1.0.2 (Debian / Ubuntu)
apt-cache madison soldier-of-fortune sudo apt install soldier-of-fortune=<VERSION_BEFORE_2.1.0.2> sudo apt-mark hold soldier-of-fortune
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list soldier-of-fortune sudo dnf downgrade soldier-of-fortune-<VERSION_BEFORE_2.1.0.2> sudo dnf versionlock add soldier-of-fortune
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2004-1542?

soldier of fortune: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2004-1542 being exploited?

CVE-2004-1542 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2004-1542 affect?

CVE-2004-1542 affects soldier of fortune. Severity is medium (CVSS 5.0). Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply.

How urgent is CVE-2004-1542?

Priority 45/100. Public exploit reference

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.