New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
BID:11683
Info
New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
| Bugtraq ID: | 11683 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 15 2004 12:00AM |
| Updated: | Nov 15 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
New Media Generation Hired Team: Trial 2.2 New Media Generation Hired Team: Trial 2.1 New Media Generation Hired Team: Trial 2.0 |
| Not Vulnerable: | |
Discussion
New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
Multiple remote vulnerabilities reportedly affect New Media Generation Hired Team: Trial. These issues are due to failure to properly validate user-supplied input, handle exceptional conditions, and properly validate access credentials.
A remote attacker may leverage these issues to execute arbitrary code, carry out denial of service attacks and kick any player from the current game session.
Multiple remote vulnerabilities reportedly affect New Media Generation Hired Team: Trial. These issues are due to failure to properly validate user-supplied input, handle exceptional conditions, and properly validate access credentials.
A remote attacker may leverage these issues to execute arbitrary code, carry out denial of service attacks and kick any player from the current game session.
Exploit / POC
New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
The following string, when entered as a command, will trigger the format string issue and crash the affecter server:
say %n%n%n
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
The following string, when entered as a command, will trigger the format string issue and crash the affecter server:
say %n%n%n
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
New Media Generation Hired Team: Trial Multiple Remote Vulnerabilities
References:
References:
- Hired Team: Trial (New Media Generation)
- Multiple vulnerabilities in Hired Team: Trial (Shine engine) (Luigi Auriemma