CVE-2005-3064 MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt).
MediumCVSS 5.0
EPSS 2.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| multitheftauto | <= 0.5_patch_1 | No fix listed |
References
- aluigi.altervista.org exploit vendor-advisory
- 20050925 Server crash and motd deletion in MultiTheftAuto 0.5 patch 1 exploit mailing-list vendor-advisory
- 16926 third-party-advisory vendor-advisory