VulnerabilityModified

CVE-2007-1371

MEDIUM 6.9EPSS 4.10%

Does this matter?

Lower severity and a low EPSS score (4.10%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933.

CVSS 2.0: 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS: 4.10% probability · 90th percentile
CISA KEV: Not listed
Affected: radscan/conquest
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.