Toribash 2.x - Multiple Vulnerabilities

Toribash 2.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to...

Toribash 2.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to execute arbitrary code in the content of t...

Live For Speed S1S2 - Multiple Vulnerabilities

Live For Speed S1S2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25327/info Live For Speed is prone to four vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits could allow attackers to execute arbitrary code or to crash game servers...

RndLabs Babo Violent 2 - Multiple Vulnerabilities

RndLabs Babo Violent 2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25329/info Babo Violent 2 is prone to four vulnerabilities: a format-string issue and three denial-of-service issues. Successful attacks could allow attackers to execute arbitrary code or crash game server...

Live For Speed S1/S2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/25327/info Live For Speed is prone to four vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits could allow attackers to execute arbitrary code or to crash game servers...

RndLabs Babo Violent 2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/25329/info Babo Violent 2 is prone to four vulnerabilities: a format-string issue and three denial-of-service issues. Successful attacks could allow attackers to execute arbitrary code or crash game servers...

Half-Life / Counter Strike nosteam game servers DoS

Windows dedicated server crashes on HLTV client connect if client versions is = 27 and LKTV support is enabled svproxies ="1"/...

GLSA-200605-12 : Quake 3 engine based games: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200605-12 Quake 3 engine based games: Buffer Overflow landser discovered a vulnerability within the 'remapShader' command. Due to a boundary handling error in 'remapShader', there is a possibility of a buffer overflow. Impact : An...

Counter Strike (Half Life) game servers DoS

Incomplete client request leads to endless loop...

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String

source: https://www.securityfocus.com/bid/13711/info Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function. This vulnerability allows remote attackers...

CVE-2005-0325

Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service application crash via a packet with large values that are not properly handled in certain malloc or memcpy operations...

CVE-2004-1539

Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, triggering a NULL dereference. Affected software: Halo game server reply handling. Root cause: NULL dereference caused by processing a long value i...

CVE-2004-1539

Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service client crash via a long value in a game server reply, which triggers a NULL dereference...

CVE-2004-0290

Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large 1 battle type and 2 map name fields...

GLSA-200407-14 : Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries

The remote host is affected by the vulnerability described in GLSA-200407-14 Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol, this query is used to ask if the game server ...

Half-Life servers: buffer-overflow and freeze

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD 3.1.1.1c1 and 4.1.1.1a of the free dedicated server Platforms: Windows and Linux Bugs: Remote buffer overflow and Denial of Service Risk...

Multiple game servers DDoS attacks

Large UDP response is sent in reply to short request withous session setup...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...