PT-2005-1445 · Armagetron · Armagetron+1

Luigi Auriemma · Published 2005-02-11 · Updated 2016-10-18 · CVE-2005-0370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armagetron versions 0.2.6.0 and earlier Armagetron Advanced versions 0.2.7.0 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in network disconnection. This occurs when an empty UDP packet is sent, which is not properly distinguished from the "no new packets" state of the associated socket.

Recommendations For Armagetron versions 0.2.6.0 and earlier, update to a version later than 0.2.6.0 to resolve the issue. For Armagetron Advanced versions 0.2.7.0 and earlier, update to a version later than 0.2.7.0 to resolve the issue. As a temporary workaround, consider restricting access to the UDP socket to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0370

Affected Products

Armagetron

Armagetron Advanced

References · 3

• 🔥 https://exploit-db.com/exploits/810 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0370 · Security Note
• http://marc.info/?l=bugtraq&m=110811699206052&w=2 · Note