CVE-2006-2393: Empire Server

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long text strings to be appended to the player->client buffer, which causes an invalid memory access.

Affected products

• Empire Server Empire Server: version 4.3.0 only; version 4.3.2 only

Published 2006-05-16. Last modified 2026-06-16.