PT-2006-7557 · Crossfire · Crossfire

Luigi Auriemma

·

Publicado

1970-01-01

·

Atualizado

2021-08-18

·

CVE-2006-1010

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions CrossFire versions prior to 1.9.0
Description The issue is related to multiple vulnerabilities in the CrossFire package, which can lead to disruption of integrity and availability of protected information. These vulnerabilities can be exploited remotely, potentially causing a denial of service or allowing remote attackers to execute code by sending a large request to the server.
Recommendations For versions prior to 1.9.0, update to version 1.9.0 or later to resolve the issue. As a temporary workaround, consider disabling the oldsocketmode feature until a patch is available. Restrict access to the socket/request.c module to minimize the risk of exploitation. Avoid using large requests in the affected API endpoint until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-02866
BDU:2015-02867
BDU:2015-02868
CVE-2006-1010
DSA-1001-1

Produtos afetados

Crossfire