邪恶八进制信息安全团队技术讨论组's Archiver

EvilOctal 2005-1-18 11:37

[转载]Breed Malfored UDP拒绝服务漏洞

文章作者:Luigi Auriemma

Summary
Breed is "a game developed by Brat Designs using their Mercury engine". A vulnerability in Breed allows a remote attacker to cause the server to crash by sending a malformed packet.

Credit:
The information has been provided by Luigi Auriemma.
The original article can be found at: [url]http://aluigi.altervista.org/adv/breedzero-adv.txt[/url]

Details
The Breed game server can be easily crashed through the sending of an empty UDP packet. In fact if the packet size is equal to zero, the game passes a NULL pointer to the function used to parse the packet's content.

Exploit:
[url]http://www.eviloctal.com/forum/read.php?tid=6911[/url]

页: [1]
© 1999-2008 EvilOctal Security Team