Massive Entertainment Ground Control II Remote Denial of Service Vulnerability

Bugtraq ID:	11058
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2004 12:00AM
Updated:	Aug 26 2004 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Massive Entertainment Ground Control II 1.0 .0.7
Not Vulnerable:

Massive Entertainment Ground Control II Remote Denial of Service Vulnerability

Ground Control II is reported prone to a remote denial of service vulnerability. This issue presents itself when a game client or server receives a packet larger than 512 bytes.

Ground Control II versions 1.0.0.7 and prior are affected by this issue.

Massive Entertainment Ground Control II Remote Denial of Service Vulnerability

A proof of concept is available:

• /data/vulnerabilities/exploits/gc2.tar

Massive Entertainment Ground Control II Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Massive Entertainment Ground Control II Remote Denial of Service Vulnerability

References:

• Ground Control II: Operation Exodus Product Page (Massive Entertainment)
  
• Broadcast forced exit in Ground Control II 1.0.0.7 (Luigi Auriemma )