CVE-2007-4447

The CVE-2007-4447 entry concerns the Toribash client (versions 2.71 and earlier). Affected component: the game client; vulnerability type: buffer overflows. Root cause described: long game commands in replay files (.rpl) and long SAY commands that omit a required LF character can trigger arbitrar...

CVE-2007-4446

CVE-2007-4446 affects the Toribash server (2.71 and earlier). The vulnerability is a format string issue in the NICK command (client nickname) that can allow remote attackers to execute arbitrary code. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexi...

CVE-2007-4448

The CVE-2007-4448 issue affects the Toribash server (version 2.71 and earlier). The vulnerability arises because the server fails to correctly handle partially joined clients that temporarily take the ID of -1, which enables remote attackers to trigger a denial of service (daemon crash) via a GRI...

CVE-2007-4452

CVE-2007-4452 affects the Toribash client (2.71 and earlier). The vulnerability arises in handling long inputs for the emote and SPEC commands, allowing remote attackers to cause a denial-of-service (disconnection). The connected documents confirm the affected product/version and the input-based ...

CVE-2007-4449

The CVE-2007-4449 entry details a denial-of-service condition in Toribash versions 2.71 and earlier caused by processing a command without a line feed character (shown via a SAY command). Connected records (NVD/CVE list) confirm the issue affects the server/client handling of long commands, enabl...

CVE-2007-4451

The CVE-2007-4451 entry affects the Windows server component of Toribash versions 2.71 and earlier. The vulnerability arises when the server processes certain commands containing many 0x07 bytes or other invalid characters, allowing remote attackers to cause a denial-of-service condition (continu...

CVE-2007-4450

CVE-2007-4450 affects the Toribash server (versions 2.71 and earlier). The vendor notes that the server does not properly handle long commands, enabling remote attackers to trigger a protocol violation where data is sent to other clients without a required LF character, as demonstrated by a SAY c...