PT-2006-2592 · X Doom+1 · X-Doom+1

Luigi Auriemma · Published 2006-04-03 · Updated 2018-10-18 · CVE-2006-1593

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Zdaemon version 1.08.01 X-Doom (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via an invalid player slot or item number. This is due to an invalid memory access, possibly caused by an invalid array index in the ZD MissingPlayer, ZD UseItem, and ZD LoadNewClientLevel functions.

Recommendations: For Zdaemon version 1.08.01: As a temporary workaround, consider disabling the ZD MissingPlayer, ZD UseItem, and ZD LoadNewClientLevel functions until a patch is available. For X-Doom: At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-1593

Affected Products

X-Doom

Zdaemon

References · 12

• 🔥 https://exploit-db.com/exploits/27547 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1593 · Security Note
• http://secunia.com/advisories/19509 · Vendor Advisory
• http://secunia.com/advisories/19496 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1199 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1198 · Vendor Advisory
• http://securityreason.com/securityalert/662 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25593 · Note
• http://securityfocus.com/bid/17340 · Note
• http://securityfocus.com/archive/1/429521/100/0/threaded · Note
• http://aluigi.altervista.org/adv/zdaebof-adv.txt · Note