CVE-2006-1145 - Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold E

CVE-2006-1145

Summary

Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients.

References

Vulnerable Configurations

cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00:*:*:*:*:*:*:*
cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00:*:*:*:*:*:*:*

CVSS

Base:	6.5 (as of 18-10-2018 - 16:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:P/A:P

refmap via4

bid	17028
bugtraq	20060307 Multiple vulnerabilities in Alien Arena 2006 GE 5.00
fulldisc	20060307 Multiple vulnerabilities in Alien Arena 2006 GE 5.00
misc	http://aluigi.altervista.org/adv/aa2k6x-adv.txt
osvdb	23747
secunia	19144
vupen	ADV-2006-0882
xf	alien-safe-cprintf-format-string(25199)

Last major update

18-10-2018 - 16:30

Published

10-03-2006 - 11:02

Last modified

18-10-2018 - 16:30