Warrior Kings And Warrior Kings: Battles Remote Format String Vulnerability

Bugtraq ID:	13711
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2005 12:00AM
Updated:	May 23 2005 12:00AM
Credit:	Luigi Auriemma <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Black Cactus Warrior Kings: Battles 1.23 Black Cactus Warrior Kings 1.3
Not Vulnerable:

Warrior Kings And Warrior Kings: Battles Remote Format String Vulnerability

Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function.

This vulnerability allows remote attackers to crash affected game servers. Due to the nature of this vulnerability, it is also likely that attackers may cause arbitrary machine code to be executed in the context of the affected game server.

Warrior Kings And Warrior Kings: Battles Remote Format String Vulnerability

Proof of concept denial of service exploits have been provided:

• /data/vulnerabilities/exploits/warkingsfs.zip
• /data/vulnerabilities/exploits/wkbbugs.zip

Warrior Kings And Warrior Kings: Battles Remote Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Warrior Kings And Warrior Kings: Battles Remote Format String Vulnerability

References:

• Warrior Kings Home Page (Black Cactus)
  
• Warrior Kings: Battles Home Page (Black Cactus)
  
• Format string and crash in Warrior Kings 1.3 and Battles 1.23 (Luigi Auriemma )