Code injection

2007-08-2500:17:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.4%

JSON

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.

CPENameOperatorVersion
soldat_dedicated_serverle2.6.2
soldat_game_serverle1.4.2

CPE	Name	Operator	Version
	soldat_dedicated_server	le	2.6.2
	soldat_game_server	le	1.4.2

References

aluigi.altervista.org/adv/soldatdos-adv.txt

aluigi.org/poc/soldatdos.zip

www.securityfocus.com/archive/1/477624/100/0/threaded

www.securityfocus.com/bid/25426

exchange.xforce.ibmcloud.com/vulnerabilities/36232