Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

Bugtraq ID:	10022
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 31 2004 12:00AM
Updated:	Mar 31 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Luigi Auriemma <[email protected]>.
Vulnerable:	GameSpy Roger Wilco Graphical Server 1.4.1 .6 GameSpy Roger Wilco Graphical Server 1.4.1 .5 GameSpy Roger Wilco Graphical Server 1.4.1 .4 GameSpy Roger Wilco Graphical Server 1.4.1 .3 GameSpy Roger Wilco Graphical Server 1.4.1 .2 GameSpy Roger Wilco Graphical Server 1.4.1 .1 GameSpy Roger Wilco Dedicated Server (Win32) 0.30 a GameSpy Roger Wilco Dedicated Server (Win32) 0.29 GameSpy Roger Wilco Dedicated Server (Win32) 0.28 GameSpy Roger Wilco Dedicated Server (Win32) 0.27 GameSpy Roger Wilco Dedicated Server (Win32) 0.26 GameSpy Roger Wilco Dedicated Server (Linux,BSD) 0.27 GameSpy Roger Wilco Dedicated Server (Linux,BSD) 0.26
Not Vulnerable:

Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

Roger Wilco Server has been reported prone to a remote denial of service vulnerability. The issue is reported to exist due to a flaw when handling malicious UDP payloads that are destined for the vulnerable server.

A remote attacker may exploit this condition to deny service to legitimate users.

Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

The following proof of concept exploit has been supplied:

• /data/vulnerabilities/exploits/wilco2.zip

Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

Solution:
This software is no longer supported.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

References:

• Roger Wilco Home Page (GameSpy)
  
• RogerWilco: new funny bugs (Luigi Auriemma )