CVE-2007-5264

Published: Oct 8, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.

Affected (1)

Products: Battlefront: Dropteam

Battlefront

1 product

Dropteam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Battlefront Dropteam	Up to 1.3.3

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://aluigi.altervista.org/adv/dropteamz-adv.txt

Source: cve@mitre.org

http://secunia.com/advisories/27107

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3202

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481616/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25943

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36978

Source: cve@mitre.org

http://aluigi.altervista.org/adv/dropteamz-adv.txt