FluidGames The Rage Game Server Remote Denial of Service Vulnerability

Bugtraq ID:	9961
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 23 2004 12:00AM
Updated:	Mar 23 2004 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	FluidGames The Rage 1.0 1
Not Vulnerable:

FluidGames The Rage Game Server Remote Denial of Service Vulnerability

It has been reported that The Rage is prone to a denial of service vulnerability when processing client request packets containing 0 for the values of the client IP address and Port number. This issue results in an exceptional condition causing the server to enter an infinite loop leading to a hang.

The Rage 1.01 and prior are reported to be affected by this issue.

FluidGames The Rage Game Server Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

FluidGames The Rage Game Server Remote Denial of Service Vulnerability

Solution:
This application is no longer supported by the vendor.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

FluidGames The Rage Game Server Remote Denial of Service Vulnerability

References:

• The Rage Product Page (FluidGames)
  
• Server freeze in The Rage 1.01 (Luigi Auriemma )