CVE-2005-0906 : Buffer overflow in a player logging function in the Tincat network library 2.x b

Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.

Published 2005-05-02 04:00:00

Updated 2008-09-05 20:47:39

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2005-0906

Instance Four » Tincat » Version: Release 2
cpe:2.3:a:instance_four:tincat:release_2:*:*:*:*:*:*:*
Matching versions
Sacred » Sacred » Version: 1.8.2.6
cpe:2.3:a:sacred:sacred:1.8.2.6:*:*:*:*:*:*:*
Matching versions
Ubi Soft » The Settlersheritage Of Kings » Version: 1.0 2
cpe:2.3:a:ubi_soft:the_settlersheritage_of_kings:1.0_2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-0906

EPSS FAQ

10.69%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-0906

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2005-0906

http://aluigi.altervista.org/adv/tincat2bof-adv.txt

Exploit
http://www.securityfocus.com/bid/12912

Exploit
http://www.securityfocus.com/archive/1/394404

Exploit

Jump to

Vulnerability Details : CVE-2005-0906

Products affected by CVE-2005-0906

Exploit prediction scoring system (EPSS) score for CVE-2005-0906

CVSS scores for CVE-2005-0906

References for CVE-2005-0906