Electronic Arts Battlefield 1942 Remote Administration Authentication Buffer Overflow Vulnerability

Bugtraq ID:	6967
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 26 2003 12:00AM
Updated:	Feb 26 2003 12:00AM
Credit:	Discovery credited to greuff <[email protected]>.
Vulnerable:	Electronic Arts Inc. Battlefield 1942 1.3 Electronic Arts Inc. Battlefield 1942 1.2
Not Vulnerable:

Electronic Arts Battlefield 1942 Remote Administration Authentication Buffer Overflow Vulnerability

It has been reported that Battlefield 1942 does not properly check input sent to the administration port of a game server. By sending a string of excessive length, a remote attacker could crash the server, resulting in a denial of service. A manual restart of the server process would be required to resume normal service.

It is possible that this issue may be exploitable to execute arbitrary code, though this has not been confirmed.

Electronic Arts Battlefield 1942 Remote Administration Authentication Buffer Overflow Vulnerability

Proof-of-concept contributed by greuff <[email protected]>:

• /data/vulnerabilities/exploits/hoagie_bf1942_rcon.c

Electronic Arts Battlefield 1942 Remote Administration Authentication Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Electronic Arts Battlefield 1942 Remote Administration Authentication Buffer Overflow Vulnerability

References:

• Battlefield 1942 Homepage (Electronic Arts Inc.)
  
• [VSA0307] Battlefield 1942 remote DoS ("VOID.AT Security" )