LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
BID:11750
Info
LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
| Bugtraq ID: | 11750 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2004 12:00AM |
| Updated: | Nov 24 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
LucasArts Star Wars Battlefront 1.11 |
| Not Vulnerable: | |
Discussion
LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
LucasArts Star Wars Battlefront game server is reported prone to multiple remote denial of service vulnerabilities. The following issues are reported:
It is reported that the Star Wars Battlefront game server fails to perform sufficient boundary checks on 'nickname' data that is supplied by a client.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
Additionally, it is reported that the Star Wars Battlefront game server provides debugging functionality that may be leveraged by a malicious client to trigger a server crash.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
This vulnerability is reported to affect LucasArts Star Wars Battlefront up to and including version 1.11.
LucasArts Star Wars Battlefront game server is reported prone to multiple remote denial of service vulnerabilities. The following issues are reported:
It is reported that the Star Wars Battlefront game server fails to perform sufficient boundary checks on 'nickname' data that is supplied by a client.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
Additionally, it is reported that the Star Wars Battlefront game server provides debugging functionality that may be leveraged by a malicious client to trigger a server crash.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
This vulnerability is reported to affect LucasArts Star Wars Battlefront up to and including version 1.11.
Exploit / POC
LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
The following exploit is available:
The following exploit is available:
Solution / Fix
LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
LucasArts Star Wars Battlefront Game Server Multiple Remote Denial Of Service Vulnerabilities
References:
References:
- Star Wars Battlefront Homepage (LucasArts)
- Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.1 (Luigi Auriemma