CVE-2007-4446

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command client nickname when entering a game...

CVE-2007-4448

The CVE-2007-4448 issue affects the Toribash server (version 2.71 and earlier). The vulnerability arises because the server fails to correctly handle partially joined clients that temporarily take the ID of -1, which enables remote attackers to trigger a denial of service (daemon crash) via a GRI...

CVE-2007-4452: Undefined Security Weakness

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service disconnection via a long 1 emote or 2 SPEC command...

CVE-2007-4449: Undefined Security Weakness

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service application hang via a command without an LF character, as demonstrated by a SAY command...

CVE-2007-4450

CVE-2007-4450 affects the Toribash server (versions 2.71 and earlier). The vendor notes that the server does not properly handle long commands, enabling remote attackers to trigger a protocol violation where data is sent to other clients without a required LF character, as demonstrated by a SAY c...

Toribash 2.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to execute arbitrary code in the content of t...

Toribash 2.x - Multiple Vulnerabilities

Toribash 2.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to...