Freeciv Multiple Remote Denial of Service Vulnerabilities
BID:19117
CVE-2006-3913 |Info
Freeciv Multiple Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 19117 |
| Class: | Design Error |
| CVE: |
CVE-2006-3913 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 23 2006 12:00AM |
| Updated: | May 23 2007 09:37PM |
| Credit: | Luigi Auriemma discovered this issue. |
| Vulnerable: |
Pardus Linux 2007.1 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Freeciv Freeciv 2.1 beta1 Freeciv Freeciv 2.0.8 Freeciv Freeciv 2.0.7 Freeciv Freeciv 2.0.4 Freeciv Freeciv 2.0.1 Freeciv Freeciv 2.0 beta8 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: | |
Discussion
Freeciv Multiple Remote Denial of Service Vulnerabilities
Freeciv server is prone to multiple remote denial-of-service vulnerabilities.
A remote attacker may exploit these issues to deny service to legitimate users by sending malicious packets to a server.
Freeciv 2.1.0-beta1 and prior versions are affected by these issues.
Freeciv server is prone to multiple remote denial-of-service vulnerabilities.
A remote attacker may exploit these issues to deny service to legitimate users by sending malicious packets to a server.
Freeciv 2.1.0-beta1 and prior versions are affected by these issues.
Exploit / POC
Freeciv Multiple Remote Denial of Service Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Freeciv Multiple Remote Denial of Service Vulnerabilities
Solution:
The vendor has addressed this issue in the SVN release of 16 Jul 2006.
Please see the referenced advisories for more information.
Freeciv Freeciv 2.0.1
Freeciv Freeciv 2.0.4
Solution:
The vendor has addressed this issue in the SVN release of 16 Jul 2006.
Please see the referenced advisories for more information.
Freeciv Freeciv 2.0.1
-
Debian freeciv-client-gtk_2.0.1-1sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_alpha.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_amd64.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_arm.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_hppa.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_i386.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_ia64.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_m68k.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_mips.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_mipsel.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_powerpc.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_s390.deb -
Debian freeciv-client-gtk_2.0.1-1sarge2_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- gtk_2.0.1-1sarge2_sparc.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_alpha.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_amd64.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_arm.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_hppa.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_i386.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_ia64.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_m68k.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_mips.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_mipsel.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_powerpc.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_s390.deb -
Debian freeciv-client-xaw3d_2.0.1-1sarge2_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-client- xaw3d_2.0.1-1sarge2_sparc.deb -
Debian freeciv-data_2.0.1-1sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-data_2. 0.1-1sarge2_all.deb -
Debian freeciv-gtk_2.0.1-1sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-gtk_2.0 .1-1sarge2_all.deb -
Debian freeciv-server_2.0.1-1sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_alpha.deb -
Debian freeciv-server_2.0.1-1sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_amd64.deb -
Debian freeciv-server_2.0.1-1sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_arm.deb -
Debian freeciv-server_2.0.1-1sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_hppa.deb -
Debian freeciv-server_2.0.1-1sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_i386.deb -
Debian freeciv-server_2.0.1-1sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_ia64.deb -
Debian freeciv-server_2.0.1-1sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_m68k.deb -
Debian freeciv-server_2.0.1-1sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_mips.deb -
Debian freeciv-server_2.0.1-1sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_mipsel.deb -
Debian freeciv-server_2.0.1-1sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_powerpc.deb -
Debian freeciv-server_2.0.1-1sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_s390.deb -
Debian freeciv-server_2.0.1-1sarge2_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-server_ 2.0.1-1sarge2_sparc.deb -
Debian freeciv-xaw3d_2.0.1-1sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv-xaw3d_2 .0.1-1sarge2_all.deb -
Debian freeciv_2.0.1-1sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/f/freeciv/freeciv_2.0.1-1 sarge2_all.deb
Freeciv Freeciv 2.0.4
-
Mandriva freeciv-client-2.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads -
Mandriva freeciv-client-2.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://wwwnew.mandriva.com/en/downloads -
Mandriva freeciv-data-2.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads -
Mandriva freeciv-data-2.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://wwwnew.mandriva.com/en/downloads -
Mandriva freeciv-server-2.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads -
Mandriva freeciv-server-2.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://wwwnew.mandriva.com/en/downloads
References
Freeciv Multiple Remote Denial of Service Vulnerabilities
References:
References:
- Warcraft Resurrection Homepage (Warzone Resurrection)
- Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (Luigi Auriemma