medium5.0Public exploit code
CVE-2006-2393
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long text strings to be…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Empire 4.3.2 - 'strncat' Denial of Service2006-05-14 · dos · windows · Verified
Impact
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long text strings to be appended to the player->client buffer, which causes an invalid memory access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Empire Server | Empire Server | Versions 4.3.0, 4.3.2 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/empiredos-adv.txt
- http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/
- http://secunia.com/advisories/20094
- http://securityreason.com/securityalert/896
- http://www.securityfocus.com/archive/1/433940/100/0/threaded
- http://www.vupen.com/english/advisories/2006/1798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26525
- http://aluigi.altervista.org/adv/empiredos-adv.txt
- http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/
- http://secunia.com/advisories/20094
- http://securityreason.com/securityalert/896
- http://www.securityfocus.com/archive/1/433940/100/0/threaded
- http://www.vupen.com/english/advisories/2006/1798
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26525