Sumus Game Server Remote Buffer Overflow Vulnerability

Bugtraq ID:	13162
Class:	Boundary Condition Error
CVE:	CVE-2005-1110
Remote:	Yes
Local:	No
Published:	Apr 14 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	Vade 79 <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Sumus Game Server 0.2.2
Not Vulnerable:

Sumus Game Server Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects the Sumus game server. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static process buffers.

An attacker may exploit this issue to execute arbitrary code with superuser privileges, facilitating unauthorized access and privilege escalation.

Sumus Game Server Remote Buffer Overflow Vulnerability

The following exploit has been made available:

• /data/vulnerabilities/exploits/xsumus.c

Sumus Game Server Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sumus Game Server Remote Buffer Overflow Vulnerability

References:

• Sumus Home Page (Sumus)
  
• sumus[v0.2.2]: (httpd) remote buffer overflow exploit. (Vade 79 )