DropTeam Multiple Remote Vulnerabilities

Bugtraq ID:	25943
Class:	Unknown
CVE:	CVE-2007-5263 CVE-2007-5264 CVE-2007-5262
Remote:	Yes
Local:	No
Published:	Oct 05 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Battlefront Dropteam 1.3.3
Not Vulnerable:

DropTeam Multiple Remote Vulnerabilities

DropTeam is prone to multiple remote vulnerabilities including multiple format-string issues, a stack-based buffer-overflow issue, multiple heap-based buffer-overflow issues, and an information-disclosure vulnerability.

An attacker could exploit these issues to execute arbitrary code within the context of the affected application, crash the application, and obtain sensitive information.

These issues affect DropTeam 1.3.3; other versions may also be affected.

DropTeam Multiple Remote Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/dropteamz.zip

DropTeam Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DropTeam Multiple Remote Vulnerabilities

References:

• Dropteam Homepage (Battlefront)
  
• Multiple vulnerabilities in Dropteam 1.3.3 ([email protected])