Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
BID:5148
Info
Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
| Bugtraq ID: | 5148 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 03 2002 12:00AM |
| Updated: | Jul 03 2002 12:00AM |
| Credit: | Published by Auriemma Luigi <[email protected]>. |
| Vulnerable: |
Epic Games Unreal Tournament Server 436.0 |
| Not Vulnerable: | |
Discussion
Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play.
It is possible to use an Unreal Tournament server as an amplifyer in a flooding attack, by transmiting multiple UDP packets with a spoofed victim IP address. The server will make repeated attempts to initiate a connection with the specified address, consuming network resources.
Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play.
It is possible to use an Unreal Tournament server as an amplifyer in a flooding attack, by transmiting multiple UDP packets with a spoofed victim IP address. The server will make repeated attempts to initiate a connection with the specified address, consuming network resources.
Exploit / POC
Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
An exploit has been provided by Auriemma Luigi <[email protected]>:
An exploit has been provided by Auriemma Luigi <[email protected]>:
Solution / Fix
Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
Solution:
Auriemma Luigi <[email protected]> has suggested that the InitialConnectTimeout key in the [IpDrv.TcpNetDriver] configuration section be reduced from it's default value of 150 seconds to a more reasonable constant. This may reduce the severity of an attack.
The vendor has released a replacement IpDrv.dll for vulnerable Microsoft Windows based servers which resolves this issue:
Epic Games Unreal Tournament Server 436.0
Solution:
Auriemma Luigi <[email protected]> has suggested that the InitialConnectTimeout key in the [IpDrv.TcpNetDriver] configuration section be reduced from it's default value of 150 seconds to a more reasonable constant. This may reduce the severity of an attack.
The vendor has released a replacement IpDrv.dll for vulnerable Microsoft Windows based servers which resolves this issue:
Epic Games Unreal Tournament Server 436.0
-
Epic Games UT436-IpDrv-070902.zip
http://unreal.epicgames.com/files/UT436-IpDrv-070902.zip
References
Epic Games Unreal Tournament Server DoS Amplifier Vulnerability
References:
References:
- New DoS attack (Jeff Calvert
) - Unreal Tournament Homepage (Epic Games)