Description
Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.
References
- 11299 third-party-advisory
- 4966 vdb-entry
- 1009667 vdb-entry
- igi2covertstrike-rcon-format-string(15742) vdb-entry
- 10053 vdb-entry
- 20040405 Format string bug in IGI 2: Covert Strike 1.3 mailing-list
- http://aluigi.altervista.org/adv/igi2fs-adv.txt