Volition Red Faction Game Server/Client Denial Of Service Vulnerability

Bugtraq ID:	3651
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-0952
Remote:	Yes
Local:	No
Published:	Dec 07 2001 12:00AM
Updated:	Jul 11 2009 09:06AM
Credit:	This vulnerability was submitted to BugTraq on December 7th, 2001 by sh0 <[email protected]>.
Vulnerable:	Volition Red Faction 1.1 0 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME Volition Red Faction 1.0 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME
Not Vulnerable:

Volition Red Faction Game Server/Client Denial Of Service Vulnerability

Red Faction is a commercial 3D first person shooter game developed by Volition and published by THQ.

Red Faction allows up to 32 players to game across a LAN or TCP/IP. Both the Red Faction Game Server and the client communicate on port 7755 by default. If UDP packets are sent to the port Red Faction is listening on, this will cause both the Game Server and the client to crash.

Volition Red Faction Game Server/Client Denial Of Service Vulnerability

The following example is sufficient to crash Red Faction:

nmap -sU -p 7755 <ip>

Volition Red Faction Game Server/Client Denial Of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Volition Red Faction Game Server/Client Denial Of Service Vulnerability

References:

• Red Faction Homepage (Volition)