PT-2004-2434 · Hired Team · Hired Team: Trial

Luigi Auriemma · Published 2004-12-31 · Updated 2016-10-18 · CVE-2004-1526

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hired Team: Trial versions 2.0 and earlier Hired Team: Trial version 2.200

Description The issue allows game players to kick other players off the server without limitation, including the administrator.

Recommendations For Hired Team: Trial versions 2.0 and earlier, consider implementing access controls to restrict the ability of players to kick others off the server. For Hired Team: Trial version 2.200, restrict the kick functionality to authorized users, such as administrators, to prevent unauthorized kicks.

Fix

Related Identifiers

CVE-2004-1526

Affected Products

Hired Team: Trial

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-1526 · Security Note
• http://marc.info/?l=bugtraq&m=110054260919742&w=2 · Note
• http://secunia.com/advisories/13207 · Note