Description
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
References
- 14690 vdb-entry
- http://aluigi.altervista.org/adv/bfccown-adv.txt
- 16629 third-party-advisory
- bfcommand-client-gain-privileges(22057) vdb-entry
- 20050829 Multiple vulnerabilities in BFCommand & Control for Battlefield mailing-list