PT-2005-1403 · Xpand · Xpand Rally

Luigi Auriemma · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0325

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xpand Rally version 1.0.0.0

Description The issue allows remote attackers or malicious game servers to cause a denial of service, resulting in an application crash. This is achieved by sending a packet with large values that are not properly handled in certain memory allocation or copy operations, such as malloc or memcpy.

Recommendations For Xpand Rally version 1.0.0.0, consider restricting access to untrusted game servers or packets to minimize the risk of exploitation until a patch is available. As a temporary workaround, implementing proper input validation and handling for packet values may help mitigate the issue.

Exploit

Fix

Related Identifiers

CVE-2005-0325

Affected Products

Xpand Rally

References · 9

• 🔥 https://exploit-db.com/exploits/780 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html · Exploit
• 🔥 http://aluigi.altervista.org/adv/xprallyboom-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0325 · Security Note
• http://secunia.com/advisories/14073 · Note
• http://securityfocus.com/bid/12409 · Note
• http://marc.info/?l=bugtraq&m=110720064811485&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19150 · Note
• http://securitytracker.com/id?1013043 · Note