CVEs-PoC/2007/CVE-2007-1251.md

CVE-2007-1251

Description

Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the message handling.

POC

Reference

• http://aluigi.altervista.org/adv/netrekfs-adv.txt
• http://aluigi.altervista.org/adv/netrekfs-adv.txt

Github

No PoCs found on GitHub currently.