Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability

Bugtraq ID:	11223
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2004 12:00AM
Updated:	Sep 20 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Impressions Games Lords of the Realm III
Not Vulnerable:

Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability

A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server.

The problem is in the handling of nicknames of excessive length.

It should be noted that this vulnerability only occurs when the server enters "lobby mode," which is a brief window of time before the initiation of a new game.

Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/lotr3boom.c

Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability

References:

• Impression Games Homepage (Impression Games)
  
• Lords of the Realm III DoS (Luigi Auriemma)