CVE-2007-4448

MEDIUM 5.0CVE-2007-4448 · Published 21/08/2007 · updated 16/06/2026

In short

CVE-2007-4448 is a MEDIUM (CVSS 5.0) vulnerability affecting toribash (toribash).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
toribash toribash	`≤ 2.71`	No fix yet

Description

The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1.

References

aluigi.org/poc/toribashish.zip · Exploit
secunia.com/advisories/26507 · Vendor Advisory
securityreason.com/securityalert/3033
securityfocus.com/archive/1/477025/100/0/threaded
securityfocus.com/bid/25359 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/36098

More vulnerabilities in toribash

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

toribash

≤ 2.71

No fix yet

More vulnerabilities in toribash

See all →