PT-2005-3655 · Id · Lithium Ii Mod

Sinnull · Publicado 2005-09-02 · Atualizado 2017-07-11 · CVE-2005-2774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lithium II mod version 1.24 for Quake 2

Description The issue allows remote attackers to cause a denial of service, potentially leading to a server crash, and may also enable the execution of arbitrary code. This is achieved through the use of format string specifiers in the nickname.

Recommendations For Lithium II mod version 1.24, consider restricting or validating user input for the nickname field to prevent the use of malicious format string specifiers until a patch is available.

Correção

Identificadores relacionados

CVE-2005-2774

Produtos afetados

Lithium Ii Mod

Referências · 5

• http://securityfocus.com/bid/14664 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2774 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112500372617684&w=2 · Nota
• http://secunia.com/advisories/16585 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22013 · Nota