Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
BID:9960
Info
Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
| Bugtraq ID: | 9960 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 23 2004 12:00AM |
| Updated: | Mar 23 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to Todd Chapman <[email protected]>. |
| Vulnerable: |
Mythic Entertainment Dark Age of Camelot 1.68 Mythic Entertainment Dark Age of Camelot 1.67 Mythic Entertainment Dark Age of Camelot 1.66 Mythic Entertainment Dark Age of Camelot 1.65 Mythic Entertainment Dark Age of Camelot 1.64 Mythic Entertainment Dark Age of Camelot 1.63 Mythic Entertainment Dark Age of Camelot 1.62 Mythic Entertainment Dark Age of Camelot 1.61 Mythic Entertainment Dark Age of Camelot 1.60 |
| Not Vulnerable: |
Mythic Entertainment Dark Age of Camelot 1.69 f Mythic Entertainment Dark Age of Camelot 1.69 e Mythic Entertainment Dark Age of Camelot 1.69 d Mythic Entertainment Dark Age of Camelot 1.69 c Mythic Entertainment Dark Age of Camelot 1.69 b Mythic Entertainment Dark Age of Camelot 1.69 a Mythic Entertainment Dark Age of Camelot 1.69 Mythic Entertainment Dark Age of Camelot 1.68 b Mythic Entertainment Dark Age of Camelot 1.68 a |
Discussion
Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
An encryption key signing vulnerability has been reported to exist in Dark Age of Camelot. This issue is due to a design error in the application that carries out encryption without having the encryption key signed or verified by the affected server.
This issue may allow for an attacker to carry out man-in-the-middle attacks against a vulnerable system. Successful exploitation may allow an attacker to gain access to sensitive information transmitted between the client and the games server.
An encryption key signing vulnerability has been reported to exist in Dark Age of Camelot. This issue is due to a design error in the application that carries out encryption without having the encryption key signed or verified by the affected server.
This issue may allow for an attacker to carry out man-in-the-middle attacks against a vulnerable system. Successful exploitation may allow an attacker to gain access to sensitive information transmitted between the client and the games server.
Exploit / POC
Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
The following exploit has been provided:
The following exploit has been provided:
Solution / Fix
Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
Solution:
Upgrades are available that are not prone to this vulnerability. It should be noted that the vendor has neither confirmed or denied this issue.
Solution:
Upgrades are available that are not prone to this vulnerability. It should be noted that the vendor has neither confirmed or denied this issue.
References
Mythic Entertainment Dark Age of Camelot Encryption Key Signing Vulnerability
References:
References:
- Product Home Page (Mythic Entertainment)