Gearbox Software Halo Combat Evolved Game Server Remote Denial Of Service Vulnerability

Bugtraq ID:	11147
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 09 2004 12:00AM
Updated:	Sep 09 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Gearbox Software Halo Combat Evolved 1.31 Gearbox Software Halo Combat Evolved 1.4 Gearbox Software Halo Combat Evolved 1.2
Not Vulnerable:	Gearbox Software Halo Combat Evolved 1.5

Gearbox Software Halo Combat Evolved Game Server Remote Denial Of Service Vulnerability

The Halo Combat Evolved game server is reported prone to a remote denial of service vulnerability.

A remote attacker may exploit this vulnerability to deny service for legitimate game players.

Patches are available to address the issue.

Gearbox Software Halo Combat Evolved Game Server Remote Denial Of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/HaloBoom.zip

Gearbox Software Halo Combat Evolved Game Server Remote Denial Of Service Vulnerability

Solution:
The following updates are available to address this vulnerability:


Gearbox Software Halo Combat Evolved 1.4

• MacSoft halo105_updater.sit
  http://files.bungie.org/halo105_updater.sit


• Microsoft halopc105.exe
  http://download.microsoft.com/download/2/d/2/2d2d17f1-7436-46a5-a9c7-c 15909cd673f/halopc105.exe

Gearbox Software Halo Combat Evolved Game Server Remote Denial Of Service Vulnerability

References:

• Halo Combat Evolved For Windows (Microsoft)
  
• Halo: Combat Evolved (Apple)
  
• Off-by-one bug in Halo 1.04 (Luigi Auriemma )