medium5.0Public exploit code
CVE-2007-4531
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (crash) via (1) a lon…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Soldat 1.4.2 - Multiple Remote Denial of Service Vulnerabilities2007-08-23 · dos · multiple · Verified
Impact
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (crash) via (1) a long string to the file transfer port or (2) a long chat message, or (3) a server denial of service (continuous beep and slowdown) via a string containing many 0x07 or other control characters to the file transfer port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michal Marcinkowski | Soldat Dedicated Server | through 2.6.2 |
| Michal Marcinkowski | Soldat Game Server | through 1.4.2 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/soldatdos-adv.txt
- http://aluigi.org/poc/soldatdos.zip
- http://secunia.com/advisories/26564
- http://www.securityfocus.com/archive/1/477624/100/0/threaded
- http://www.securityfocus.com/bid/25426
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36231
- http://aluigi.altervista.org/adv/soldatdos-adv.txt
- http://aluigi.org/poc/soldatdos.zip
- http://secunia.com/advisories/26564
- http://www.securityfocus.com/archive/1/477624/100/0/threaded
- http://www.securityfocus.com/bid/25426
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36231