Lucene search

K
cveMitreCVE-2007-4446
HistoryAug 21, 2007 - 12:17 a.m.

CVE-2007-4446

2007-08-2100:17:00
mitre
web.nvd.nist.gov
24
cve
2007
4446
format string
vulnerability
toribash
remote attackers
execute
arbitrary code
nick command
client nickname
game

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.113

Percentile

95.2%

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.

Affected configurations

Nvd
Node
toribashtoribashRange2.71
VendorProductVersionCPE
toribashtoribash*cpe:2.3:a:toribash:toribash:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.113

Percentile

95.2%

Related for CVE-2007-4446