Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alien_arena_2006 | Cor_entertainment | gold_5.00 (including) | gold_5.00 (including) |
References
- http://aluigi.altervista.org/adv/aa2k6x-adv.txt
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html
- http://secunia.com/advisories/19144
- http://www.osvdb.org/23747
- http://www.securityfocus.com/archive/1/426984/100/0/threaded
- http://www.securityfocus.com/bid/17028
- http://www.vupen.com/english/advisories/2006/0882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25199
- http://aluigi.altervista.org/adv/aa2k6x-adv.txt
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html
- http://secunia.com/advisories/19144
- http://www.osvdb.org/23747
- http://www.securityfocus.com/archive/1/426984/100/0/threaded
- http://www.securityfocus.com/bid/17028
- http://www.vupen.com/english/advisories/2006/0882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25199