PT-2007-5629 · Nabi Studios · Toribash

Published 2007-08-21 · Updated 2018-10-15 · CVE-2007-4448

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Toribash versions 2.71 and earlier

Description The issue arises from the server's improper handling of partially joined clients that are temporarily assigned the ID of -1. This allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a GRIP command with the ID of -1.

Recommendations For Toribash versions 2.71 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-4448

Affected Products

Toribash

References · 7

• 🔥 http://securityfocus.com/bid/25359 · Exploit
• 🔥 http://aluigi.org/poc/toribashish.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4448 · Security Note
• http://secunia.com/advisories/26507 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36098 · Note
• http://securityreason.com/securityalert/3033 · Note
• http://securityfocus.com/archive/1/477025/100/0/threaded · Note