empire server records
4 published records for vendor empire server.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-134 Use of Externally-Controlled Format String1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
41Plan | CVE-2008-3169No exploit | Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute empire server · empire server · CWE-119 | Critical10.0 | 4.7%Jul 14, 2008 |
25Monitor | CVE-2006-1840No exploit | Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load, empire server · empire server · CWE-134 | Medium6.4 | 1.4%Apr 19, 2006 |
21Monitor | CVE-2006-2393Proof of concept | The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing longempire server · empire server | Medium5.0 | 3.8%May 15, 2006 |
20Monitor | CVE-2008-3168No exploit | The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNempire server · empire server · CWE-200 | Medium5.0 | 1.0%Jul 14, 2008 |
- CVE-2008-316941Plan
Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute
CriticalCVSS 10.0No exploitEPSS 4%empire server · empire serverJul 14, 2008
- CVE-2006-184025Monitor
Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load,
MediumCVSS 6.4No exploitEPSS 1%empire server · empire serverApr 19, 2006
- CVE-2006-239321Monitor
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long
MediumCVSS 5.0Proof of conceptEPSS 3%empire server · empire serverMay 15, 2006
- CVE-2008-316820Monitor
The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRN
MediumCVSS 5.0No exploitEPSS 1%empire server · empire serverJul 14, 2008