medium5.0Public exploit code
CVE-2003-1354
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GameSpy 3D 2.62 - Packet Amplification Denial of Service2003-01-17 · dos · linux · Verified
Impact
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gamespy3d | Gamespy 3d | Version 2.62 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2003/Jan/0178.html
- http://www.pivx.com/kristovich/adv/mk001/
- http://www.securiteam.com/securitynews/5EP0O0K8UO.html
- http://www.securityfocus.com/bid/6636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11084
- http://seclists.org/lists/bugtraq/2003/Jan/0178.html
- http://www.pivx.com/kristovich/adv/mk001/
- http://www.securiteam.com/securitynews/5EP0O0K8UO.html
- http://www.securityfocus.com/bid/6636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11084