CVE-2007-4450 - CVE House
Back to Database
Status published Medium CVE-2007-4450

The server in Toribash 2.71 and earlier does not properly...

Vulnerability Description

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is not clear, although it probably makes exploitation of CVE-2007-4449 easier.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4450

Credits & Attribution

No credits recorded in the NVD database.

References

More from toribash

View All →
CVE-2007-4452
The client in Toribash 2.71 and earlier allows remote attackers...
Medium 5
CVE-2007-4451
The server in Toribash 2.71 and earlier on Windows allows...
Medium 5
CVE-2007-4449
The client in Toribash 2.71 and earlier allows remote attackers...
Medium 5
CVE-2007-4448
The server in Toribash 2.71 and earlier does not properly...
Medium 5
CVE-2007-4447
Multiple buffer overflows in the client in Toribash 2.71 and...
High 7.5

Affected Vendor

Affected Software

toribash
Vulnerable Versions:
0

Timeline

Official Publish: August 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.