CVE-2007-5265

Dawnoftime Dawn OF Time < 1.69s_beta4 - Format String Vulnerability

Title source: rule
STIX 2.1

Description

Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdosmultiple
https://www.exploit-db.com/exploits/30644

References (8)

Core 8
Core References
Various Sources x_refsource_misc
http://forums.dawnoftime.org/viewtopic.php?t=2102
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3418
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27083
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/481619/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36973
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3201
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25944

Scores

EPSS 0.1494
EPSS Percentile 94.6%

Details

CWE
CWE-134
Status published
Products (1)
dawnoftime/dawn_of_time < 1.69s_beta4
Published Oct 08, 2007
Tracked Since Feb 18, 2026