← back
CVE-2006-1618

CVE-2006-1618

EPSS 13.2%
Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27566unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://aluigi.altervista.org/adv/doomsdayfs-adv.txthttp://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044865.htmlhttp://secunia.com/advisories/19515http://secunia.com/advisories/19519http://securitytracker.com/id?1015860https://exchange.xforce.ibmcloud.com/vulnerabilities/25622http://www.gentoo.org/security/en/glsa/glsa-200604-05.xmlhttp://www.securityfocus.com/archive/1/429857/100/0/threadedhttp://www.securityfocus.com/bid/17369http://www.vupen.com/english/advisories/2006/1221