PT-2004-2655 · Vivendi Universal Games · Ground Control Ii: Operation Exodus

Luigi Auriemma · Published 2004-08-26 · Updated 2017-07-11 · CVE-2004-1751

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ground Control II: Operation Exodus versions 1.0.0.7 and earlier

Description The issue allows remote servers to cause a denial of service, resulting in either a client or server crash. This occurs when a large packet is sent, generating a "Message too long" socket error that is treated as a critical error.

Recommendations For Ground Control II: Operation Exodus versions 1.0.0.7 and earlier, consider restricting packet size from remote servers to prevent the denial of service. As a temporary workaround, implement measures to handle "Message too long" socket errors in a way that does not treat them as critical, thus preventing crashes.

Exploit

Fix

Related Identifiers

CVE-2004-1751

Affected Products

Ground Control Ii: Operation Exodus

References · 7

• 🔥 http://securityfocus.com/bid/11058 · Exploit
• 🔥 https://exploit-db.com/exploits/429 · Exploit
• http://securitytracker.com/id?1011075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1751 · Security Note
• http://aluigi.altervista.org/adv/gc2boom-adv.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17130 · Note
• http://marc.info/?l=bugtraq&m=109357154602892&w=2 · Note