GLSA-200407-14 : Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries

The remote host is affected by the vulnerability described in GLSA-200407-14 Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol, this query is used to ask if the game server ...

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow PoC source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack...

Policy - America's Army Game Client Detection

Binary data 1191.prm...

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checking performed on the hostname...

Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries

Background Unreal Tournament 2003 and 2004 are popular first-person-shooter games. They are both based on the Unreal engine, and can be used in a game server / client setup. Description The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol,...

Unreal Engine Secure Query Remote Overflow

The remote host was running a game server with the Unreal Engine on it. The game server is vulnerable to a remote attack which allows for arbitrary code execution. Note that Nessus disabled this service while testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

Various crashs and fun in Race Driver 1.20

Luigi Auriemma Application: http://www.codemasters.com/tocaracedriver/ Versions: = 1.20 Platforms: Windows Bugs: various crashs and spoofed messages Risk: medium Exploitation: remote, versus server and attached clients Date: 08 June 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Colin McRae Rally 2004 - Multiplayer Denial of Service

Colin McRae Rally 2004 - Multiplayer Denial of Service source: https://www.securityfocus.com/bid/10464/info It is reported that Colin McRae Rally 2004 has a flaw handling server responses when entering the multiplayer menu of the game. When entering the multiplayer menu, the game client sends a...

DSA-503 mah-jong - missing argument check

Bulletin has no description...

HALO Network Server Detection

The remote host is running a version of HALO Network Server. The server is used to host Internet and Local Area Network LAN games. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid12117; scriptversion"1.14";...

Broadcast client buffer-overflow in Terminator 3 1.0

Luigi Auriemma Application: Terminator 3: War of the Machines http://www.t3war.com Versions: 1.0 Platforms: Windows Bug: broadcast client's buffer-overflow Risk: very high Exploitation: remote and automatic, versus clients Date: 19 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web...

Server freeze in The Rage 1.01

Luigi Auriemma Application: The Rage http://www.therageonline.com Versions: = 1.01 Platforms: Windows Bug: server freeze Risk: low Exploitation: remote, versus server Date: 23 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 Th...

Unreal Tournament Server Detection

The remote host is running a version of Unreal Tournament Server. The Server is used to host Internet and Local Area Network LAN games. %NASLMINLEVEL 70300 Copyright C 2004 Tenable Network Security include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid12115;...

Chrome 1.2.0.0 server crash

Luigi Auriemma Application: Chrome http://www.chromethegame.com Versions: = 1.2.0.0 Platforms: Windows Bug: reading and writing into unallocated memory crash Risk: medium/high Exploitation: remote, versus server Date: 18 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

CVE-2004-0278

The Ratbag game engine (used in Dirt Track Racing, Leadfoot, World of Outlaws Spring Cars) is vulnerable to a remote denial-of-service through crafted TCP traffic: a packet declaring a data length followed by a second packet with less data triggers the engine to repeatedly poll the socket, consum...

CVE-2004-0278

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

Crafty Game Stack Overflow & Exploit

Copyright © Rosiello Security http://www.rosiello.org ADVISORY: http://www.rosiello.org/en/readbugs.php?18 BACKGROUND: by SecurityTracker EXPLOIT: http://www.rosiello.org/archivio/crafty.zip Impact: Execution of arbitrary code via local system, User access via local system Versions: 19.3 and prio...

Targem Games Battle Mages 1.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9849/info The Battle Mages game server has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when the server receives incomplete client data. Specifically the affected server will attempt to rea...

RedStorm Ghost Recon Game Engine - Remote Denial of Service

RedStorm Ghost Recon Game Engine - Remote Denial of Service source: https://www.securityfocus.com/bid/9738/info The Ghost Recon Game Engine has been reported prone to a denial of service vulnerability. When handling text strings, the Ghost Recon Game Engine employs a 32-bit integer string size...

Digital Reality Game Engine 1.0.x - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a client. The immediate...