Description
Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.
References
- http://aluigi.altervista.org/adv/dropteamz-adv.txt
- dropteam-0x1packet-format-string(36974) vdb-entry
- 20071005 Multiple vulnerabilities in Dropteam 1.3.3 mailing-list
- 25943 vdb-entry
- 27107 third-party-advisory
- 3202 third-party-advisory