deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5226
Published: 2007-10-05
Description: irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://dircproxy.securiweb.net/ticket/89; https://bugzilla.redhat.com/show_bug.cgi?id=319301; http://dircproxy.securiweb.net/ticket/89
CVE: CVE-2007-3918
Published: 2007-10-05
Description: Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gforge.org/scm/viewvc.php/trunk/gforge/www/account/verify.php?root=gforge&r1=5967&r2=6092; http://gforge.org/tracker/?func=detail&atid=105&aid=3094&group_id=1; http://secunia.com/advisories/27042
CVE: CVE-2007-5227
Published: 2007-10-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters.  NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37427; http://secunia.com/advisories/27005; http://trew.icenetx.net/toolz/advisory-blackboard-messages-en.txt
CVE: CVE-2007-5228
Published: 2007-10-05
Description: Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module before 4.7.x-1.5, 4.7.x-2.x before 4.7.x-2.5, and 5.x-1.x before 5.x-1.1 for Drupal allows remote authenticated users with project create or edit permissions to inject arbitrary web script or HTML via unspecified vectors involving a (1) individual or (2) overview form.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/180568; http://osvdb.org/37962; http://secunia.com/advisories/27064
CVE: CVE-2007-5229
Published: 2007-10-05
Description: Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurner_FeedSmith_Plugin.php, as demonstrated by the (1) feedburner_url and (2) feedburner_comments_url parameters.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-352
References: http://blogs.feedburner.com/feedburner/archives/2007/10/the_feedsmith_plugin_newly_for.php; http://blogsecurity.net/wordpress/feedburner-feed-hijacking/; http://blogsecurity.net/wordpress/feedsmith-feedburner-vulnerability-fixed/
CVE: CVE-2007-5230
Published: 2007-10-05
Description: admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request.  NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/27028; http://www.securityfocus.com/bid/25861; https://www.exploit-db.com/exploits/4466
CVE: CVE-2007-5231
Published: 2007-10-05
Description: Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/27028; http://www.securityfocus.com/bid/25861; https://exchange.xforce.ibmcloud.com/vulnerabilities/36872
CVE: CVE-2007-5232
Published: 2007-10-05
Description: Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.
CVSS Score: 4.0 (MEDIUM)
References: http://conference.hitb.org/hitbsecconf2007kl/?page_id=148; http://conference.hitb.org/hitbsecconf2007kl/materials/D2T1%20-%20Billy%20Rios%20-%20Slipping%20Past%20the%20Firewall.pdf; http://dev2dev.bea.com/pub/advisory/272
CVE: CVE-2007-5233
Published: 2007-10-05
Description: SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/27063; http://www.securityfocus.com/bid/25926; http://www.solpotcrew.org/adv/home_edition2001-adv-03.txt
CVE: CVE-2007-5234
Published: 2007-10-05
Description: PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers to execute arbitrary PHP code via a URL in the level parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://nicenamecrew.com/exploits/Ossigeno-script.txt; http://www.securityfocus.com/bid/25924; https://exchange.xforce.ibmcloud.com/vulnerabilities/36949
CVE: CVE-2007-5235
Published: 2007-10-06
Description: Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the f_email parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39898; http://www.securityfocus.com/bid/25912; http://osvdb.org/39898
CVE: CVE-2007-5236
Published: 2007-10-06
Description: Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
CVE: CVE-2007-5237
Published: 2007-10-06
Description: Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533; http://secunia.com/advisories/27261
CVE: CVE-2007-5238
Published: 2007-10-06
Description: Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
CVE: CVE-2007-5239
Published: 2007-10-06
Description: Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
CVE: CVE-2007-5240
Published: 2007-10-06
Description: Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/272; http://download.novell.com/Download?buildid=q5exhSqeBjA~; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
CVE: CVE-2007-5241
Published: 2007-10-06
Description: Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD Port * All" command, which overwrites a Non-Paged Pool Packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://mail.openvms.org:8100/Lists/alerts/Message/582.html; http://mail.openvms.org:8100/Lists/alerts/Message/583.html; http://osvdb.org/37811
CVE: CVE-2007-5242
Published: 2007-10-06
Description: Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffer segment."
CVSS Score: 4.3 (MEDIUM)
References: http://mail.openvms.org:8100/Lists/alerts/Message/582.html; http://mail.openvms.org:8100/Lists/alerts/Message/583.html; http://osvdb.org/37812
CVE: CVE-2007-5243
Published: 2007-10-06
Description: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38605; http://osvdb.org/38606; http://osvdb.org/38607
CVE: CVE-2007-5244
Published: 2007-10-06
Description: Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38610; http://risesecurity.org/advisory/RISE-2007002/; http://risesecurity.org/blog/entry/3/
CVE: CVE-2007-5245
Published: 2007-10-06
Description: Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors involving the INET_connect function.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://risesecurity.org/advisory/RISE-2007003/; http://risesecurity.org/blog/entry/3/; http://risesecurity.org/exploit/18/
CVE: CVE-2007-5246
Published: 2007-10-06
Description: Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=195569; http://risesecurity.org/advisory/RISE-2007003/; http://risesecurity.org/blog/entry/3/
CVE: CVE-2007-5247
Published: 2007-10-06
Description: Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500.  NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
CVSS Score: 9.3 (HIGH)
CWE: CWE-134
References: http://aluigi.altervista.org/adv/fearfspb-adv.txt; http://aluigi.org/poc/fearfspb.zip; http://osvdb.org/45530
CVE: CVE-2007-5248
Published: 2007-10-06
Description: Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server or (2) a PB_U packet to UCON.  NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
CVSS Score: 9.3 (HIGH)
CWE: CWE-134
References: http://aluigi.altervista.org/adv/d3engfspb-adv.txt; http://aluigi.org/poc/d3engfspb.zip; http://secunia.com/advisories/27002
CVE: CVE-2007-5249
Published: 2007-10-06
Description: Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to cause a denial of service (daemon crash) via a long (1) PB_Y packet to the YPG server on UDP port 1716 or (2) PB_U packet to UCON on UDP port 1716, different vectors than CVE-2007-4442.  NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/aaboompb-adv.txt; http://aluigi.org/poc/aaboompb.zip; http://secunia.com/advisories/27015
CVE: CVE-2007-5250
Published: 2007-10-06
Description: The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters.  NOTE: this issue may overlap CVE-2007-4443.  NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/aaboompb-adv.txt; http://aluigi.org/poc/aaboompb.zip; http://secunia.com/advisories/27015
CVE: CVE-2007-5251
Published: 2007-10-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html; http://secunia.com/advisories/27080; http://www.securityfocus.com/bid/25940
CVE: CVE-2007-5252
Published: 2007-10-06
Description: Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup.  NOTE: a vendor statement, which is too vague to be sure that it is for this particular issue, says that only a denial of service is possible.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27082; http://securityreason.com/securityalert/3198; http://www.netsupportsoftware.com/support/td.asp?td=545&Site=nsltd&Lang=
CVE: CVE-2007-5253
Published: 2007-10-06
Description: c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file.  NOTE: this might be a directory traversal vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/38580; http://secunia.com/advisories/27061; http://securityreason.com/securityalert/3194
CVE: CVE-2007-5254
Published: 2007-10-06
Description: VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.html; http://osvdb.org/37991; http://secunia.com/advisories/27094
CVE: CVE-2007-5255
Published: 2007-10-06
Description: Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26946; http://securityvulns.ru/Sdocument32.html; http://websecurity.com.ua/1368/
CVE: CVE-2007-5256
Published: 2007-10-06
Description: Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and (2) remote authenticated users to execute arbitrary code via long commands on TCP port 6809 to the servinterface::sendmulticast function in servinterface.cc, as demonstrated by a PIcallsign command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/fsdbof-adv.txt; http://secunia.com/advisories/27008; http://secunia.com/advisories/27045
CVE: CVE-2007-5257
Published: 2007-10-06
Description: Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/37724; http://secunia.com/advisories/27017; http://shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html
CVE: CVE-2007-5258
Published: 2007-10-06
Description: PHP remote file inclusion vulnerability in log.php in phpFreeLog alpha 0.2.0 allows remote attackers to include and execute arbitrary files via unspecified vectors.  NOTE: the original disclosure is likely erroneous.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/45519; http://www.attrition.org/pipermail/vim/2007-October/001820.html; http://www.secumania.org/exploits/web-applications/phpfreelog-alpha-v0_2_0--%3C%3D--remote-file-inclusion-vulnerability[PII_REDACTED]175/
CVE: CVE-2007-5259
Published: 2007-10-06
Description: Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform some actions as administrators, as demonstrated by changing the administrator password.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/37663; http://secunia.com/advisories/27026; http://www.securityfocus.com/bid/25885
CVE: CVE-2007-5260
Published: 2007-10-06
Description: ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMS_v100.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/3199; http://www.securityfocus.com/archive/1/481213/100/0/threaded; http://securityreason.com/securityalert/3199
CVE: CVE-2007-5261
Published: 2007-10-06
Description: Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25895; https://exchange.xforce.ibmcloud.com/vulnerabilities/36927; https://www.exploit-db.com/exploits/4480
CVE: CVE-2007-4851
Published: 2007-10-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5137.  Reason: This candidate is a duplicate of CVE-2007-5137.  Notes: All CVE users should reference CVE-2007-5137 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4924
Published: 2007-10-08
Description: The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html; http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html; http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sippdu.cxx?r1=2.83.2.19&r2=2.83.2.20
CVE: CVE-2007-5262
Published: 2007-10-08
Description: Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://aluigi.altervista.org/adv/dropteamz-adv.txt; http://secunia.com/advisories/27107; http://securityreason.com/securityalert/3202
CVE: CVE-2007-5263
Published: 2007-10-08
Description: Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via (1) a crafted "0x5c" packet or (2) many 32-bit numbers in a "0x18" packet, or cause a denial of service (crash) via (3) a large "0x4b" packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/dropteamz-adv.txt; http://secunia.com/advisories/27107; http://securityreason.com/securityalert/3202
CVE: CVE-2007-5264
Published: 2007-10-08
Description: Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://aluigi.altervista.org/adv/dropteamz-adv.txt; http://secunia.com/advisories/27107; http://securityreason.com/securityalert/3202
CVE: CVE-2007-5265
Published: 2007-10-08
Description: Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://aluigi.altervista.org/adv/dawnfs-adv.txt; http://forums.dawnoftime.org/viewtopic.php?t=2102; http://secunia.com/advisories/27083