Targem Games Battle Mages Remote Denial Of Service Vulnerability

Bugtraq ID:	9849
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 11 2004 12:00AM
Updated:	Mar 11 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Targem Games Battle Mages 1.0
Not Vulnerable:

Targem Games Battle Mages Remote Denial Of Service Vulnerability

The Battle Mages game server has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when the server receives incomplete client data. Specifically the affected server will attempt to read the expected data size infinitely until it is received, this may allow a remote attacker to tie up server resources and effectively deny service to legitimate users.

Targem Games Battle Mages Remote Denial Of Service Vulnerability

The following proof of concept exploits have been supplied:

• /data/vulnerabilities/exploits/battlemagx.rar
• /data/vulnerabilities/exploits/battlemagy.rar

Targem Games Battle Mages Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Targem Games Battle Mages Remote Denial Of Service Vulnerability

References:

• Battle Mages (Targem Games)
  
• Battle Mages DoS (Luigi Auriemma )