PT-2007-2766 · Conquest · Conquest

Publicado 2007-03-10 · Atualizado 2018-10-16 · CVE-2007-1371

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Conquest versions 8.2a and earlier

Description The issue involves multiple buffer overflows that can be exploited in different ways. Locally, users can gain privileges by querying a metaserver that sends a long server entry, which is processed by the metaGetServerList function. Remote metaservers can also execute arbitrary code via a long server entry processed by the same function. Additionally, exceeding the configured number of metaservers can have an unknown impact. Remote attackers can corrupt memory by sending a SP CLIENTSTAT packet with certain values of unum or snum.

Recommendations For Conquest versions 8.2a and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1371

Produtos afetados

Conquest

Referências · 10

• 🔥 http://radscan.com/conquest/cq-ml/msg00169.html · Exploit
• 🔥 https://exploit-db.com/exploits/29717 · Exploit
• http://securityfocus.com/archive/1/462184/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32849 · Nota
• http://vupen.com/english/advisories/2007/0854 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1371 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32860 · Nota
• http://secunia.com/advisories/24370 · Nota
• http://securityreason.com/securityalert/2399 · Nota
• http://securityfocus.com/bid/22855 · Nota