CVE-2007-5264 Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
MediumCVSS 5.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| battlefront dropteam | <= 1.3.3 | No fix listed |
References
- aluigi.altervista.org
- 27107 third-party-advisory vendor-advisory
- 3202 third-party-advisory
- 20071005 Multiple vulnerabilities in Dropteam 1.3.3 mailing-list
- 25943 vdb-entry
- dropteam-account-information-disclosure(36978) vdb-entry