CVE-2007-4446

Опубликовано: 21 авг. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.

Ссылки

http://aluigi.org/poc/toribashish.zip
Exploit
http://secunia.com/advisories/26507
Vendor Advisory
http://securityreason.com/securityalert/3033
http://www.securityfocus.com/archive/1/477025/100/0/threaded
http://www.securityfocus.com/bid/25359
Exploit
http://aluigi.org/poc/toribashish.zip
Exploit
http://secunia.com/advisories/26507
Vendor Advisory
http://securityreason.com/securityalert/3033
http://www.securityfocus.com/archive/1/477025/100/0/threaded
http://www.securityfocus.com/bid/25359
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:toribash:toribash:*:*:*:*:*:*:*:*

Версия до 2.71 (включая)

EPSS

Процентиль: 92%

0.07513

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-46fx-rm5j-9627

github

почти 4 года назад