PT-2006-2592 · X Doom+1 · X-Doom+1

Luigi Auriemma · Publicado 2006-04-03 · Atualizado 2018-10-18 · CVE-2006-1593

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Zdaemon version 1.08.01 X-Doom (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via an invalid player slot or item number. This is due to an invalid memory access, possibly caused by an invalid array index in the ZD MissingPlayer, ZD UseItem, and ZD LoadNewClientLevel functions.

Recommendations: For Zdaemon version 1.08.01: As a temporary workaround, consider disabling the ZD MissingPlayer, ZD UseItem, and ZD LoadNewClientLevel functions until a patch is available. For X-Doom: At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-1593

Produtos afetados

X-Doom

Zdaemon

Referências · 12

• 🔥 https://exploit-db.com/exploits/27547 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1593 · Nota de Segurança
• http://securityreason.com/securityalert/662 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html · Nota
• http://secunia.com/advisories/19509 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25593 · Nota
• http://securityfocus.com/bid/17340 · Nota
• http://secunia.com/advisories/19496 · Aviso do Fabricante
• http://securityfocus.com/archive/1/429521/100/0/threaded · Nota
• http://aluigi.altervista.org/adv/zdaebof-adv.txt · Nota
• http://vupen.com/english/advisories/2006/1199 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1198 · Aviso do Fabricante