EUVD-2007-4430

Malware in sbrugna...

Format string

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command client nickname when entering a game...

CVE-2007-4449

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service application hang via a command without an LF character, as demonstrated by a SAY command...

CVE-2007-4452

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service disconnection via a long 1 emote or 2 SPEC command...