deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4400
Published: 2007-08-18
Description: CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://osvdb.org/39569; http://secunia.com/advisories/26456
CVE: CVE-2007-4401
Published: 2007-08-18
Description: Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://secunia.com/advisories/26491; http://securityreason.com/securityalert/3036
CVE: CVE-2007-4402
Published: 2007-08-18
Description: Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://secunia.com/advisories/26491; http://securityreason.com/securityalert/3036
CVE: CVE-2007-4403
Published: 2007-08-18
Description: The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://securityreason.com/securityalert/3036; http://wouter.coekaerts.be/site/security/nowplaying
CVE: CVE-2007-4404
Published: 2007-08-18
Description: ircu 2.10.12.01 allows remote attackers to (1) cause a denial of service (flood wallops) by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and (2) cause a denial of service (daemon crash) via a "J 0:#channel" message on a channel without an apass; and (3) allows remote authenticated operators to cause a denial of service (daemon crash) via a remote "names -D" command.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/46710; http://osvdb.org/46711; http://osvdb.org/46712
CVE: CVE-2007-4405
Published: 2007-08-18
Description: ircu 2.10.12.02 through 2.10.12.04 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by creating a large number of unused channels (zannels).
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/46718; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4406
Published: 2007-08-18
Description: ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/46717; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4407
Published: 2007-08-18
Description: ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attackers to (1) set or remove certain channel modes via a "netriding" attack or (2) take over a channel by joining an unlinked server with the A/Upass and then setting a new Apass.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/46716; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4408
Published: 2007-08-18
Description: ircu 2.10.12.05 and earlier ignores timestamps in bounces, which allows remote attackers to take over a channel during a netjoin by causing a bounce while a server with an older version of the channel is linking.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/46715; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4409
Published: 2007-08-18
Description: Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/46714; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4410
Published: 2007-08-18
Description: ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops.
CVSS Score: 6.0 (MEDIUM)
References: http://osvdb.org/46713; http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded
CVE: CVE-2007-4411
Published: 2007-08-18
Description: ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/3031; http://www.securityfocus.com/archive/1/476285/100/0/threaded; http://www.securityfocus.com/bid/25285
CVE: CVE-2007-4412
Published: 2007-08-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (1) techs.php, (2) ticket_category.php, (3) ticket_priority.php, (4) ticket_workflow.php, (5) ticket_escalate.php, (6) fields_ticket.php, (7) ticket_rules_web.php, (8) ticket_displayfields.php, (9) ticket_rules_mail.php, (10) fields_user.php, (11) fields_faq.php, and (12) user_help.php, in (a) admincp/ and (b) possibly a directory on the "User side."
CVSS Score: 3.5 (LOW)
References: http://securityreason.com/securityalert/3029; http://www.securityfocus.com/archive/1/476454/100/0/threaded; http://www.securityfocus.com/bid/25325
CVE: CVE-2007-4413
Published: 2007-08-18
Description: Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in the do parameter.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/46653; http://securityreason.com/securityalert/3029; http://www.securityfocus.com/archive/1/476454/100/0/threaded
CVE: CVE-2007-4414
Published: 2007-08-18
Description: Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26459; http://securitytracker.com/id?1018573; http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml
CVE: CVE-2007-4415
Published: 2007-08-18
Description: Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26459; http://securityreason.com/securityalert/3023; http://securitytracker.com/id?1018573
CVE: CVE-2007-4416
Published: 2007-08-18
Description: captcha.php in BellaBook (aka BellaBuffs) allows remote attackers to obtain administrative privileges by sending the admin's username (admin_name) in a pheap_login cookie.  NOTE: the vendor disputes this vulnerability because authentication data is derived from the admin_pass and secret variables, in addition to the admin_name; and because the exploit code is designed for an unrelated application
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/42506; http://www.securityfocus.com/archive/1/475153/100/200/threaded; http://www.securityfocus.com/archive/1/475259/100/200/threaded
CVE: CVE-2007-4417
Published: 2007-08-18
Description: IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/26471; http://www-1.ibm.com/support/docview.wss?uid=swg1IY88158; http://www-1.ibm.com/support/docview.wss?uid=swg1IY88226
CVE: CVE-2007-4418
Published: 2007-08-18
Description: IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors.  NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/26471; http://www-1.ibm.com/support/docview.wss?uid=swg1JR25940; http://www-1.ibm.com/support/docview.wss?uid=swg21255352
CVE: CVE-2007-4419
Published: 2007-08-18
Description: Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html; http://osvdb.org/39714; http://secunia.com/advisories/26533
CVE: CVE-2007-4420
Published: 2007-08-18
Description: Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability than CVE-2007-3168 and CVE-2007-3169.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://osvdb.org/38794; http://www.ocxt.com/archives/39; http://www.securityfocus.com/bid/25344
CVE: CVE-2007-4421
Published: 2007-08-18
Description: SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.
CVSS Score: 9.3 (HIGH)
References: http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html; http://osvdb.org/39712; http://secunia.com/advisories/26533
CVE: CVE-2007-4422
Published: 2007-08-18
Description: The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/26511; http://www.osvdb.org/36489; http://www.securityfocus.com/bid/25338
CVE: CVE-2007-4423
Published: 2007-08-18
Description: Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/26471; http://www-1.ibm.com/support/docview.wss?uid=swg1IZ01828; http://www-1.ibm.com/support/docview.wss?uid=swg21255607
CVE: CVE-2007-4424
Published: 2007-08-18
Description: Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop of a client system via certain HTML, as demonstrated by a filename in the DATA attribute of an OBJECT element. NOTE: it could be argued that this is not a vulnerability because a dangerous file is not actually launched, but as of 2007, it is generally accepted that web browsers should prompt users before saving dangerous content.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/3022; http://www.securityfocus.com/archive/1/476675/100/0/threaded; http://www.securityfocus.com/archive/1/476690/100/0/threaded
CVE: CVE-2007-0437
Published: 2007-08-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and (3) the PAGE parameter to showsource.csp in csp/samples/; and allow remote authenticated users to inject arbitrary web script or HTML via (4) the ERROR parameter to csp/samples/xmlclasseserror.csp, and unspecified vectors in (5) object.csp and (6) lotteryhistory.csp in csp/samples/.
CVSS Score: 3.5 (LOW)
References: http://www.cpni.gov.uk/Products/alerts/2928.aspx; http://www.mwrinfosecurity.com/advisories/mwri_cache-sample-files-xss-advisory_2007-04-04.pdf; http://www.mwrinfosecurity.com/news/1658.html
CVE: CVE-2007-4425
Published: 2007-08-20
Description: Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash) via an ID 10 packet containing a long string corresponding to an unavailable track.
CVSS Score: 6.0 (MEDIUM)
References: http://aluigi.altervista/adv/lfsbof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065265.html; http://secunia.com/advisories/26569
CVE: CVE-2007-4426
Published: 2007-08-20
Description: Live for Speed (LFS) S1 and S2 allows remote attackers to cause a denial of service (server crash) via (1) a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or (2) a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista/adv/lfsbof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065265.html; http://secunia.com/advisories/26569
CVE: CVE-2007-4427
Published: 2007-08-20
Description: Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.
CVSS Score: 3.5 (LOW)
References: http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b; http://osvdb.org/40178; http://secunia.com/advisories/26541
CVE: CVE-2007-4428
Published: 2007-08-20
Description: Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/39629; http://secunia.com/advisories/26532; http://vil.mcafeesecurity.com/vil/content/v_142976.htm
CVE: CVE-2007-4429
Published: 2007-08-20
Description: Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number."  NOTE: this identifier is for the en.securitylab.ru disclosure.  According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem.  As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem.
CVSS Score: 5.0 (MEDIUM)
References: http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates; http://en.securitylab.ru/poc/301420.php; http://en.securitylab.ru/poc/extra/301419.php
CVE: CVE-2007-4430
Published: 2007-08-20
Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command.  NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9; http://secunia.com/advisories/26798; http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html
CVE: CVE-2007-4431
Published: 2007-08-20
Description: Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/46720; http://sla.ckers.org/forum/read.php?3%2C14151; http://www.0x000000.com/index.php?i=420
CVE: CVE-2007-4432
Published: 2007-08-20
Description: Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LD_LIBRARY_PATH and (b) MONO_GAC_PREFIX environment variables.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/46781; http://osvdb.org/46782; http://osvdb.org/46783
CVE: CVE-2007-4433
Published: 2007-08-20
Description: Cross-site scripting (XSS) vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37734; http://securityreason.com/securityalert/3048; http://www.packetstormsecurity.org/0708-exploits/aspnet-xss.txt
CVE: CVE-2007-4434
Published: 2007-08-20
Description: Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37733; http://securityreason.com/securityalert/3046; http://www.packetstormsecurity.org/0708-exploits/tfsc-xss.txt
CVE: CVE-2007-4435
Published: 2007-08-20
Description: Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26504; http://www.osvdb.org/36598; http://www.osvdb.org/36599
CVE: CVE-2007-4436
Published: 2007-08-20
Description: The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obtain sensitive via the Tracker Module and the Recent posts page; (2) obtain project names via unspecified vectors; (3) obtain sensitive information via the statistics pages; and (4) read CVS project activity.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/168760; http://osvdb.org/39632; http://secunia.com/advisories/26510
CVE: CVE-2007-4437
Published: 2007-08-20
Description: SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter.  NOTE: some details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=189607; http://osvdb.org/38276; http://secunia.com/advisories/26542
CVE: CVE-2007-4438
Published: 2007-08-20
Description: Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://bugs.gentoo.org/show_bug.cgi?id=189607; http://secunia.com/advisories/26542; http://secunia.com/advisories/27253
CVE: CVE-2007-4439
Published: 2007-08-21
Description: PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_isp_root parameter, probably related to cart.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37701; http://www.securityfocus.com/bid/25382; https://exchange.xforce.ibmcloud.com/vulnerabilities/36112
CVE: CVE-2007-4440
Published: 2007-08-21
Description: Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0341.html; http://secunia.com/advisories/26519; http://www.pmail.com/m32_451.htm
CVE: CVE-2007-4441
Published: 2007-08-21
Description: Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/25414; https://exchange.xforce.ibmcloud.com/vulnerabilities/36118; https://www.exploit-db.com/exploits/4293
CVE: CVE-2007-4442
Published: 2007-08-21
Description: Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.org/adv/unrwebdos-adv.txt; http://aluigi.org/poc/unrwebdos.zip; http://secunia.com/advisories/26506
CVE: CVE-2007-4443
Published: 2007-08-21
Description: The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the Content-Type field, (3) a HEAD request, and possibly other unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.org/adv/unrwebdos-adv.txt; http://aluigi.org/poc/unrwebdos.zip; http://secunia.com/advisories/26506
CVE: CVE-2007-4444
Published: 2007-08-21
Description: Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.org/poc/rfactorx.zip; http://forum.racesimcentral.com/showthread.php?t=298659; http://secunia.com/advisories/26526
CVE: CVE-2007-4445
Published: 2007-08-21
Description: Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.org/poc/rfactorx.zip; http://forum.racesimcentral.com/showthread.php?t=298659; http://secunia.com/advisories/26526
CVE: CVE-2007-4446
Published: 2007-08-21
Description: Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.org/poc/toribashish.zip; http://secunia.com/advisories/26507; http://securityreason.com/securityalert/3033