Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
BID:11902
Info
Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11902 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2004 12:00AM |
| Updated: | Dec 13 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
Monolith Productions Tron 2.0 1.42 Monolith Productions Tron 2.0 1.0 Monolith Productions No One Lives Forever 2 1.3 Monolith Productions No One Lives Forever 1.0 .004 Monolith Productions F.E.A.R. 1.0 1 Monolith Productions Contract Jack 1.1 |
| Not Vulnerable: |
Monolith Productions F.E.A.R. 1.0 2 |
Discussion
Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
Monolith Lithtech game engine is reported prone to a remote denial of service vulnerability. The vulnerability presents itself due to a failure to handle exceptional conditions.
It is reported that socket handling code of the Lithtech game engine does not handle all potential exceptional conditions correctly, if certain sized UDP datagrams are handled the socket code will fail to handle subsequent network requests.
A remote attacker may exploit this vulnerability to deny service for legitimate users.
Monolith Lithtech game engine is reported prone to a remote denial of service vulnerability. The vulnerability presents itself due to a failure to handle exceptional conditions.
It is reported that socket handling code of the Lithtech game engine does not handle all potential exceptional conditions correctly, if certain sized UDP datagrams are handled the socket code will fail to handle subsequent network requests.
A remote attacker may exploit this vulnerability to deny service for legitimate users.
Exploit / POC
Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
The following exploit is available.
The following exploit is available.
Solution / Fix
Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
Solution:
The vendor has released a patch addressing this issue for F.E.A.R. Users are advised to contact the vendor for details on obtaining the appropriate update.
Solution:
The vendor has released a patch addressing this issue for F.E.A.R. Users are advised to contact the vendor for details on obtaining the appropriate update.
References
Monolith Lithtech Game Engine Remote Denial Of Service Vulnerability
References:
References:
- Monolith Productions Home Page (Monolith Productions)
- F.E.A.R. 1.01 likes lithsock (Luigi Auriemma
- Socket unreacheable in the Lithtech engine (new protocol) (Luigi Auriemma