EUVD-2007-4431

Malware in sbrugna...

Command injection

The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service daemon crash via a GRIP command with the ID of -1...

CVE-2007-4448

The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service daemon crash via a GRIP command with the ID of -1...