Half-Life servers: buffer-overflow and freeze

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD 3.1.1.1c1 and 4.1.1.1a of the free dedicated server Platforms: Windows and Linux Bugs: Remote buffer overflow and Denial of Service Risk...

Valve Software Half-Life Server 1.1.1.0/3.1.1.1c1/4.1.1.1a - Multiplayer Request Buffer Overflow

// source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-//check client-supplied data during requests to join multiplaye...

StarSiege: Tribes DoS

Invalid UDP packet causes game server to crash...

LBreakout2 2.x - Login Remote Format String

LBreakout2 2.x - Login Remote Format String / source: https://www.securityfocus.com/bid/8021/info It has been reported that lbreakout2 is vulnerable to a format string issue in the login component. This may result in an attacker executing arbitrary code on a vulnerable host. / / lbreakout2-2.5+:...

DSA-327 xbl - buffer overflows

Bulletin has no description...

DSA-322 typespeed - buffer overflow

Bulletin has no description...

StarSiege Tribes Server - Denial of Service (1)

StarSiege Tribes Server - Denial of Service 1 source: https://www.securityfocus.com/bid/8184/info StarSiege Tribes Game Server has been reported prone to a remotely triggered denial of service vulnerability. The issue presents itself when the affected server receives and processes a malformed UDP...

Zblast 1.2 - 'Username' Local Buffer Overrun

// source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive data within the variable, it may be possible...

Zblast 1.2 - Username Local Buffer Overrun

Zblast 1.2 - Username Local Buffer Overrun // source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

Batalla Naval 1.0 4 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

Batalla Naval 1.0 4 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game serve...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. / by jsk for gbnserver remote exploit dem...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. !/usr/bin/perl Priv8security.com remote...

Maelstrom Buffer Overflow

Maelstrom is an arcade game. There is a buffer overflow vulnerability in Maelstrom which allow local attacker arbitrary code execution. Vulnerable systems: Maelstrom 3.0.6 Maelstrom 3.0.5 Example: lucae@linux$ gdb /usr/bin/Maelstrom GNU gdb 5.2.1-2mdk Mandrake Linux Copyright 2002 Free Software...

Multiple game servers DDoS attacks

Large UDP response is sent in reply to short request withous session setup...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...

Unreal engine: results of my research

After almost 3 months, I have finally decided to release the huge advisory/paper about bugs founded in the Unreal engine and all the relative code for the vulnerabilities exploitation plus some tools that I have written during the reversing of the engine. The link for get the english advisory is:...

Epic Games Unreal Engine 436 - URL Directory Traversal

source: https://www.securityfocus.com/bid/6775/info It has been reported that a directory traversal vulnerability exists in several games using some versions of the Unreal Engine. It is possible for attackers to traverse outside of the game's installation directory using directory traversal...

Epic Games Unreal Engine 436 - URL Directory Traversal

Epic Games Unreal Engine 436 - URL Directory Traversal source: https://www.securityfocus.com/bid/6775/info It has been reported that a directory traversal vulnerability exists in several games using some versions of the Unreal Engine. It is possible for attackers to traverse outside of the game's...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...