CVEvulnerability
CVE-2007-1371
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933.
Affected configurations
• radscan conquest (<= 8.2a)
References
- http://secunia.com/advisories/24370 secunia.com
- http://securityreason.com/securityalert/2399 securityreason.com
- http://www.radscan.com/conquest/cq-ml/msg00169.html Exploit
- http://www.securityfocus.com/archive/1/462184/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22855 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0854 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32849 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32860 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/24370 secunia.com
- http://securityreason.com/securityalert/2399 securityreason.com
- http://www.radscan.com/conquest/cq-ml/msg00169.html Exploit
- http://www.securityfocus.com/archive/1/462184/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22855 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0854 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32849 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32860 exchange.xforce.ibmcloud.com