Dopewars Server 'REQUESTJET'消息远程拒绝服务漏洞

Bugraq ID: 36606 Dopewars Server是一款角色扮演游戏服务程序。 Dopewars Server处理REQUESTJET消息存在错误，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 Dopewars 1.5.12 厂商解决方案 目前没有详细解决方案提供： http://dopewars.sourceforge.net/ ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902...

Code injection

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

DEBIAN-CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591: Improper Input Validation

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...