Description
The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes.
References
- 3024 third-party-advisory
- 20070814 Multiple vulnerabilities in Babo Violent 2 2.08.00 mailing-list
- http://aluigi.altervista.org/adv/bv2x-adv.txt