PT-2005-1403 · Xpand · Xpand Rally

Luigi Auriemma · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0325

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xpand Rally version 1.0.0.0

Description The issue allows remote attackers or malicious game servers to cause a denial of service, resulting in an application crash. This is achieved by sending a packet with large values that are not properly handled in certain memory allocation or copy operations, such as malloc or memcpy.

Recommendations For Xpand Rally version 1.0.0.0, consider restricting access to untrusted game servers or packets to minimize the risk of exploitation until a patch is available. As a temporary workaround, implementing proper input validation and handling for packet values may help mitigate the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0325

Produtos afetados

Xpand Rally

Referências · 9

• 🔥 https://exploit-db.com/exploits/780 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html · Exploit
• 🔥 http://aluigi.altervista.org/adv/xprallyboom-adv.txt · Exploit
• http://secunia.com/advisories/14073 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0325 · Nota de Segurança
• http://securityfocus.com/bid/12409 · Nota
• http://marc.info/?l=bugtraq&m=110720064811485&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19150 · Nota
• http://securitytracker.com/id?1013043 · Nota