Live For Speed S2 Duplicate Join Packet Remote Denial of Service Vulnerability

Bugtraq ID:	36114
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 23 2009 12:00AM
Updated:	Aug 24 2009 09:13PM
Credit:	Luigi Auriemma
Vulnerable:	Live for Speed Live for Speed S2 Z13 Live for Speed Live for Speed S2 Live for Speed Live for Speed S1 Live for Speed Live for Speed Demo Live for Speed Live for Speed 0.5Z15 Live for Speed Live for Speed 0.5X10
Not Vulnerable:

Live For Speed S2 Duplicate Join Packet Remote Denial of Service Vulnerability

Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

An attacker could exploit this issue to restart races on vulnerable servers, resulting in a denial-of-service condition.

Live For Speed S2 Z13 is vulnerable; other versions may also be affected.

Live For Speed S2 Duplicate Join Packet Remote Denial of Service Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/lfsreset.zip
• /data/vulnerabilities/exploits/lfsfp.zip

Live For Speed S2 Duplicate Join Packet Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Live For Speed S2 Duplicate Join Packet Remote Denial of Service Vulnerability

References:

• lfsreset-adv.txt (Luigi Auriemma)
  
• Live for Speed Homepage (Live For Speed)