CVE-2006-1145

Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

4.46% chance of exploitation in the next 30 days, 91th percentile

Published

2006-03-10

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.altervista.org/adv/aa2k6x-adv.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1564

References

• CVE Record
• NVD entry

Related

• CVE-2006-1144
• CVE-2006-1146
• CVE-2006-1140
• CVE-2006-1147
• CVE-2006-1135
• CVE-2006-1148