PT-2009-5873 · Dopewars · Dopewars

Publicado 2009-10-08 · Atualizado 2018-10-10 · CVE-2009-3591

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dopewars version 1.5.12

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This can be achieved by sending a REQUESTJET message that contains an invalid location.

Recommendations For Dopewars version 1.5.12, consider restricting or validating the location parameter in REQUESTJET messages to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-3591

Produtos afetados

Dopewars

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/misc/dopewars.rb · Exploit
• 🔥 https://exploit-db.com/exploits/33269 · Exploit
• 🔥 http://securityfocus.com/bid/36606 · Exploit
• 🔥 https://exploit-db.com/exploits/10004 · Exploit
• http://secunia.com/advisories/36961 · Aviso do Fabricante
• http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033 · Nota
• https://security-tracker.debian.org/tracker/CVE-2009-3591 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-3591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3591 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2009-3591 · Aviso do Fabricante
• http://securityfocus.com/archive/1/507012/100/0/threaded · Nota
• http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033 · Correção