CVE-2005-2790 BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote at...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bfcommand and control software bfcc | <= 1.22_a | No fix listed |
| bfcommand and control software bfvcc | = 2.00_a | No fix listed |
| bfcommand and control software bfvcc | = 2.14_b | No fix listed |
References
- aluigi.altervista.org exploit vendor-advisory
- 20050829 Multiple vulnerabilities in BFCommand & Control for Battlefield mailing-list
- 16629 third-party-advisory vendor-advisory
- 14690 exploit vdb-entry
- bfcommand-client-gain-privileges(22057) vdb-entry