medium5.0Public exploit code
CVE-2005-0621
Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error b…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Scrapland 1.0 - Server Termination Denial of Service2005-02-28 · dos · windows · Verified
Impact
Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a "newpos" value that is less than or equal to a size value, or (4) partial packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enlight Software | Scrapland | Version 1.0 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/scrapboom-adv.txt
- http://marc.info/?l=full-disclosure&m=110961578504928&w=2
- http://secunia.com/advisories/14435
- http://aluigi.altervista.org/adv/scrapboom-adv.txt
- http://marc.info/?l=full-disclosure&m=110961578504928&w=2
- http://secunia.com/advisories/14435