Toribash

toribash

Vendor: Toribash • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4452 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPEC command.
CVE-2007-4451 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) via certain commands that contain many 0x07 or other invalid characters.
CVE-2007-4450 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as dem...Show more The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is not clear, although it probably makes exploitation of CVE-2007-4449 easier.Show less
CVE-2007-4449 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF character, as demonstrated by a SAY command.
CVE-2007-4448 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP c...Show more The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1.Show less
CVE-2007-4447 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application cra...Show more Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.Show less
CVE-2007-4446 1Toribash 1Toribash Apr 23, 2026 Aug 21, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.