CVE-2007-5264
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the...
CVE-2007-5264 is a medium vulnerability (CVSS 5.0) in Battlefront Dropteam, published October 8, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.11%, the 88th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.11%EPSS, 88th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | DropTeam 1.3.3 - Multiple Remote Vulnerabilities | 2007-10-05 |
What each source reports
NVD Score used
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
- Record
CVE-2007-5264- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
- Record
CVE-2007-5264- Updated
- 2026-11-02
EUVDEUVD-2007-5244No score
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
- Record
EUVD-2007-5244- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fqrg-p497-vw5jNo score
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the...
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.
- Record
GHSA-fqrg-p497-vw5j- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
aluigi.altervista.org/adv/dropteamz-adv.txt
securityfocus.com/archive/1/481616/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/36978
secunia.com/advisories/27107
securityreason.com/securityalert/3202
nvd.nist.gov/vuln/detail/CVE-2007-5264
github.com/advisories/GHSA-fqrg-p497-vw5j