NASCAR Racing UDP Datagram Remote Denial of Service Vulnerability

Bugtraq ID:	18778
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 03 2006 12:00AM
Updated:	Jul 04 2006 04:24PM
Credit:	Luigi Auriemma is credited with the discovery of this issue.
Vulnerable:	Electronic Arts Inc. NASCAR Racing 2003 1.2 1 Electronic Arts Inc. NASCAR RACING 2002 1.1 2 Electronic Arts Inc. NASCAR Racing 4.1.3 1.6
Not Vulnerable:

NASCAR Racing UDP Datagram Remote Denial of Service Vulnerability

NASCAR Racing is prone to a denial-of-service vulnerability. This issue is due to the application's failure to properly handle empty UDP datagrams.

The vulnerability allows remote attackers from external networks to block communication between the client and the server.

This issue affects NASCAR Racing 4.1.3.1.6, NASCAR Racing 2002 Season 1.1.0.2, and NASCAR Racing 2003 Sesason 1.2.0.1; other versions may also be vulnerable.

NASCAR Racing UDP Datagram Remote Denial of Service Vulnerability

Attackers can exploit this issue by sending empty UDP datagrams to the intended server.

NASCAR Racing UDP Datagram Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

NASCAR Racing UDP Datagram Remote Denial of Service Vulnerability

References:

• Nascar Racing Game Home Page (Electronic Arts )