PT-2006-2128 · Sauerbraten · Sauerbraten

Luigi Auriemma · Publicado 2006-03-09 · Atualizado 2018-10-18 · CVE-2006-1101

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sauerbraten version 2006 02 28

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via long streams of input data. This is due to an out-of-bounds read triggered by the input data, which is not properly handled by the getint function. The sgetstr function is also affected.

Recommendations For Sauerbraten version 2006 02 28, consider restricting the input data length to prevent the out-of-bounds read until a patch is available. As a temporary workaround, consider disabling the getint and sgetstr functions to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1101

Produtos afetados

Sauerbraten

Referências · 14

• 🔥 https://exploit-db.com/exploits/1560 · Exploit
• 🔥 https://exploit-db.com/exploits/1559 · Exploit
• 🔥 http://aluigi.altervista.org/adv/evilcube-adv.txt · Exploit
• 🔥 http://securityfocus.com/bid/16986 · Exploit
• http://securityfocus.com/archive/1/426865/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1101 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25085 · Nota
• http://vupen.com/english/advisories/2006/0847 · Nota
• http://gentoo.org/security/en/glsa/glsa-200603-10.xml · Aviso do Fabricante
• http://secunia.com/advisories/19111 · Nota
• http://secunia.com/advisories/19110 · Nota
• http://securityfocus.com/archive/1/426867/100/0/threaded · Nota
• http://secunia.com/advisories/19199 · Nota
• http://vupen.com/english/advisories/2006/0848 · Nota