Interactive Studio GamePort Multiple Vulnerabilities
BID:12006
Info
Interactive Studio GamePort Multiple Vulnerabilities
| Bugtraq ID: | 12006 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 17 2004 12:00AM |
| Updated: | Dec 17 2004 12:00AM |
| Credit: | Discovery is credited to amoXi & Dr.vaXin. |
| Vulnerable: |
Interactive Studio GamePort 4.0 Interactive Studio GamePort 3.1 Interactive Studio GamePort 3.0 |
| Not Vulnerable: | |
Discussion
Interactive Studio GamePort Multiple Vulnerabilities
Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable client.
The following specific issues were reported:
An attacker can bypass the connection time limit restrictions imposed by a server.
A local attacker can gain access to a server's administrative password.
A server can execute arbitrary applications on a client.
Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable client.
The following specific issues were reported:
An attacker can bypass the connection time limit restrictions imposed by a server.
A local attacker can gain access to a server's administrative password.
A server can execute arbitrary applications on a client.
Exploit / POC
Interactive Studio GamePort Multiple Vulnerabilities
An application that decodes the administrator password for a Gameport server is available from the following location:
http://www.sharemation.com/devilkins/GPSPDecode.zip
Please note that this application has not been verified or tested by Symantec.
Arbitrary application execution:
^^#CALL#:CMD.exe
An application that decodes the administrator password for a Gameport server is available from the following location:
http://www.sharemation.com/devilkins/GPSPDecode.zip
Please note that this application has not been verified or tested by Symantec.
Arbitrary application execution:
^^#CALL#:CMD.exe
Solution / Fix
Interactive Studio GamePort Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Interactive Studio GamePort Multiple Vulnerabilities
References:
References:
- Gameport Product Page (Interactive Studio)
- 4 Vulnerabilities in GamePort (amoXi Devilkin