Rigs of Rods Long Vehicle Name Buffer Overflow Vulnerability

Bugtraq ID:	26502
Class:	Boundary Condition Error
CVE:	CVE-2007-6041
Remote:	Yes
Local:	No
Published:	Nov 19 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	Luigi Auriemma discovered this issue.
Vulnerable:	Rigs Of Rods Rigs Of Rods 0.33d
Not Vulnerable:	Rigs Of Rods Rigs Of Rods 0.33d SP1

Rigs of Rods Long Vehicle Name Buffer Overflow Vulnerability

Rigs of Rods is prone to a remote buffer-overflow because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker could exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

This issue affects Rigs of Rods 0.33d and prior versions.

Rigs of Rods Long Vehicle Name Buffer Overflow Vulnerability

A proof of concept is available.

• /data/vulnerabilities/exploits/rorbof.zip

Rigs of Rods Long Vehicle Name Buffer Overflow Vulnerability

Solution:
The vendor has released Rigs of Rods 0.33d SP1 to address this issue; please see the references for details.


Rigs Of Rods Rigs Of Rods 0.33d

• Rigs Of Rods RoRserver-0.33d-SP1.zip
  http://repository.rigsofrods.com/files/RoRserver-0.33d-SP1.zip

Rigs of Rods Long Vehicle Name Buffer Overflow Vulnerability

References:

• Home Page (Rigs Of Rods)
  
• New server source code and binary available: 0.33d SP1 (Rigs Of Rods)
  
• Rigs Of Rods (Luigi Auriemma)