CVE-2005-3064

MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt).

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.31% chance of exploitation in the next 30 days, 83rd percentile

Published

2005-09-27

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://aluigi.altervista.org/adv/mtaboom-adv.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1235

Security advisories

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html
• http://secunia.com/advisories/16926

References

• CVE Record
• NVD entry