PT-2005-1445 · Armagetron · Armagetron+1

Luigi Auriemma · Publicado 2005-02-11 · Atualizado 2016-10-18 · CVE-2005-0370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armagetron versions 0.2.6.0 and earlier Armagetron Advanced versions 0.2.7.0 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in network disconnection. This occurs when an empty UDP packet is sent, which is not properly distinguished from the "no new packets" state of the associated socket.

Recommendations For Armagetron versions 0.2.6.0 and earlier, update to a version later than 0.2.6.0 to resolve the issue. For Armagetron Advanced versions 0.2.7.0 and earlier, update to a version later than 0.2.7.0 to resolve the issue. As a temporary workaround, consider restricting access to the UDP socket to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0370

Produtos afetados

Armagetron

Armagetron Advanced

Referências · 3

• 🔥 https://exploit-db.com/exploits/810 · Exploit
• http://marc.info/?l=bugtraq&m=110811699206052&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0370 · Nota de Segurança