PT-2006-2128 · Sauerbraten · Sauerbraten

Luigi Auriemma · Published 2006-03-09 · Updated 2018-10-18 · CVE-2006-1101

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sauerbraten version 2006 02 28

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via long streams of input data. This is due to an out-of-bounds read triggered by the input data, which is not properly handled by the getint function. The sgetstr function is also affected.

Recommendations For Sauerbraten version 2006 02 28, consider restricting the input data length to prevent the out-of-bounds read until a patch is available. As a temporary workaround, consider disabling the getint and sgetstr functions to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1101

Affected Products

Sauerbraten

References · 14

• 🔥 https://exploit-db.com/exploits/1560 · Exploit
• 🔥 https://exploit-db.com/exploits/1559 · Exploit
• 🔥 http://aluigi.altervista.org/adv/evilcube-adv.txt · Exploit
• 🔥 http://securityfocus.com/bid/16986 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1101 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200603-10.xml · Vendor Advisory
• http://securityfocus.com/archive/1/426865/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25085 · Note
• http://vupen.com/english/advisories/2006/0847 · Note
• http://secunia.com/advisories/19111 · Note
• http://secunia.com/advisories/19110 · Note
• http://securityfocus.com/archive/1/426867/100/0/threaded · Note
• http://secunia.com/advisories/19199 · Note
• http://vupen.com/english/advisories/2006/0848 · Note