War Times Remote Game Server Denial Of Service Vulnerability

Bugtraq ID:	13652
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 17 2005 12:00AM
Updated:	May 17 2005 12:00AM
Credit:	Luigi Auriemma is credited with the discovery of this vulnerability.
Vulnerable:	Legend Studios War Times: European Frontline 1.0 3
Not Vulnerable:

War Times Remote Game Server Denial Of Service Vulnerability

War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size memory buffer.

This vulnerability allows remote attackers to crash the game server, denying service to legitimate users.

Version 1.03, and prior are affected by this issue.

War Times Remote Game Server Denial Of Service Vulnerability

Luigi Auriemma provided the following proof of concept exploit:

• /data/vulnerabilities/exploits/wartimesboom.zip

War Times Remote Game Server Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

War Times Remote Game Server Denial Of Service Vulnerability

References:

• War Times (Luigi Auriemma)
  
• War Times: European Frontline Home Page (Legend Studios)