Lucene search

MitreCVE-2007-5265

HistoryOct 08, 2007 - 9:17 p.m.

CVE-2007-5265

2007-10-0821:17:00

CWE-134

mitre

web.nvd.nist.gov

cve

format string vulnerabilities

dawn of time

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.13

Percentile

95.6%

JSON

Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain “restricted zones”, which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.

Affected configurations

Nvd

Node

dawnoftimedawn_of_timeRange≤1.69s_beta4

VendorProductVersionCPE
dawnoftimedawn_of_time*cpe:2.3:a:dawnoftime:dawn_of_time:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dawnoftime	dawn_of_time	*	cpe:2.3:a:dawnoftime:dawn_of_time::::::::

References

aluigi.altervista.org/adv/dawnfs-adv.txt

forums.dawnoftime.org/viewtopic.php?t=2102

secunia.com/advisories/27083

securityreason.com/securityalert/3201

www.securityfocus.com/archive/1/481619/100/0/threaded

www.securityfocus.com/bid/25944

www.vupen.com/english/advisories/2007/3418

exchange.xforce.ibmcloud.com/vulnerabilities/36973

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.13

Percentile

95.6%

JSON

Related for CVE-2007-5265