CVE-2007-4446 Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when enterin...
HighCVSS 7.5
EPSS 4.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| toribash | <= 2.71 | No fix listed |
References
- aluigi.org exploit
- 26507 third-party-advisory vendor-advisory
- 3033 third-party-advisory
- 20070818 Multiple vulnerabilities in Toribash 2.71 mailing-list
- 25359 exploit vdb-entry