CVE-2007-1251

CRITICO 9.3CVE-2007-1251 · Published 03/03/2007 · updated 16/06/2026

In breve

CVE-2007-1251 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda netrek vanilla server (netrek).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.5%, superiore al 93.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netrek vanilla server netrek	`= 2.12.0`	No fix yet

Description

Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the message handling.

References

aluigi.altervista.org/adv/netrekfs-adv.txt · Exploit
secunia.com/advisories/24357 · Vendor Advisory
sourceforge.net/project/shownotes.php
securityfocus.com/archive/1/461755/100/0/threaded
securityfocus.com/bid/22786
vupen.com/english/advisories/2007/0815
exchange.xforce.ibmcloud.com/vulnerabilities/32777

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free