Nadeo Game Engine Remote Denial of Service Vulnerability

Bugtraq ID:	9604
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 09 2004 12:00AM
Updated:	Feb 09 2004 12:00AM
Credit:	The disclosure of this issue has been credited to scrap <[email protected]>.
Vulnerable:	Nadeo Virtual Skipper 3 Nadeo TrackMania Demo
Not Vulnerable:

Nadeo Game Engine Remote Denial of Service Vulnerability

It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to the software on TCP port 2350.

Nadeo Trackmania demo version has been reported to be affected by this issue.

Nadeo Game Engine Remote Denial of Service Vulnerability

The following exploit code has been supplied:

• /data/vulnerabilities/exploits/trackmania_dos.c

Nadeo Game Engine Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nadeo Game Engine Remote Denial of Service Vulnerability

References:

• Trackmania Homepage (Nadeo)
  
• Re: TrackMania Demo Denial of Service (Luigi Auriemma )
  
• TrackMania Demo Denial of Service (scrap )