CVE-2007-1371

Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

4.10% chance of exploitation in the next 30 days, 90th percentile

Published

2007-03-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29717

References

• CVE Record
• NVD entry

Related

• CVE-2007-1369
• CVE-2007-1372
• CVE-2007-1365
• CVE-2007-1373
• CVE-2007-1364
• CVE-2007-1375