Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String Vulnerability

2004-03-10T00:00:00
ID EDB-ID:23799
Type exploitdb
Reporter Luigi Auriemma
Modified 2004-03-10T00:00:00

Description

Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability. CVE-2004-1805. Dos exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/9840/info

A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data.

Ultimately this vulnerability could allow for execution of arbitrary code on the system implementing the affected server software, which would occur in the security context of the server process.

Example:

From:
Class=Engine.Pawn

To:
Class=%n%nEngine.Pawn

If the game is vulnerable it will crash when launched.