Vulnerability Details CVE-2006-1145
Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.162
EPSS Ranking 94.6%
CVSS Severity
CVSS v2 Score 6.5
References
- http://aluigi.altervista.org/adv/aa2k6x-adv.txt
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html
- http://secunia.com/advisories/19144
- http://www.osvdb.org/23747
- http://www.securityfocus.com/archive/1/426984/100/0/threaded
- http://www.securityfocus.com/bid/17028
- http://www.vupen.com/english/advisories/2006/0882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25199
- http://aluigi.altervista.org/adv/aa2k6x-adv.txt
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html
- http://secunia.com/advisories/19144
- http://www.osvdb.org/23747
- http://www.securityfocus.com/archive/1/426984/100/0/threaded
- http://www.securityfocus.com/bid/17028
- http://www.vupen.com/english/advisories/2006/0882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25199
Products affected by CVE-2006-1145
-
cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00