CVEvulnerability
CVE-2007-5265
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-134
Description
Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.
Affected configurations
• dawnoftime dawn of time (<= 1.69s beta4)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://aluigi.altervista.org/adv/dawnfs-adv.txt Exploit
- http://forums.dawnoftime.org/viewtopic.php?t=2102 forums.dawnoftime.org
- http://secunia.com/advisories/27083 Vendor Advisory
- http://securityreason.com/securityalert/3201 securityreason.com
- http://www.securityfocus.com/archive/1/481619/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25944 Exploit
- http://www.vupen.com/english/advisories/2007/3418 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36973 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/dawnfs-adv.txt Exploit
- http://forums.dawnoftime.org/viewtopic.php?t=2102 forums.dawnoftime.org
- http://secunia.com/advisories/27083 Vendor Advisory
- http://securityreason.com/securityalert/3201 securityreason.com
- http://www.securityfocus.com/archive/1/481619/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25944 Exploit
- http://www.vupen.com/english/advisories/2007/3418 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36973 exchange.xforce.ibmcloud.com