Lucene search

[email protected]CVE-2006-3393

HistoryJul 06, 2006 - 8:05 p.m.

CVE-2006-3393

2006-07-0620:05:00

[email protected]

web.nvd.nist.gov

papyrus

nascar racing

cpu consumption

denial of service

udp

cve-2006-3393

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.

Affected configurations

NVD

Node

electronic_artsnascar_racingRange≤4.1.3.1.6

electronic_artsnascar_racingRange≤2002_season_1.1.2

electronic_artsnascar_racingRange≤2003_season_1.2.1

CPENameOperatorVersion
electronic_arts:nascar_racingelectronic arts nascar racingle4.1.3.1.6
electronic_arts:nascar_racingelectronic arts nascar racingle2002_season_1.1.2
electronic_arts:nascar_racingelectronic arts nascar racingle2003_season_1.2.1

CPE	Name	Operator	Version
electronic_arts:nascar_racing	electronic arts nascar racing	le	4.1.3.1.6
electronic_arts:nascar_racing	electronic arts nascar racing	le	2002_season_1.1.2
electronic_arts:nascar_racing	electronic arts nascar racing	le	2003_season_1.2.1

References

aluigi.altervista.org/adv/nascarzero-adv.txt

secunia.com/advisories/20947

www.securityfocus.com/bid/18778

www.vupen.com/english/advisories/2006/2647

exchange.xforce.ibmcloud.com/vulnerabilities/27522

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2006-3393

cvelist1 nvd1