medium5.0Public exploit code
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dopewars Server 1.5.12 - 'REQUESTJET' Message Remote Denial of Service2009-10-15 · dos · linux · Verified
- Dopewars Server 1.5.12 - Denial of Service2009-10-06 · dos · multiple · Verified
Impact
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ben Webb | Dopewars | Version 1.5.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033
- http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033
- http://secunia.com/advisories/36961
- http://www.securityfocus.com/archive/1/507012/100/0/threaded
- http://www.securityfocus.com/bid/36606
- http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033
- http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033
- http://secunia.com/advisories/36961
- http://www.securityfocus.com/archive/1/507012/100/0/threaded
- http://www.securityfocus.com/bid/36606