PT-2006-3533 · Ubisoft+9 · Farcry+17

Luigi Auriemma · Published 2006-05-25 · Updated 2018-10-18 · CVE-2006-2587

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PunkBuster versions prior to 1.229 America's Army versions prior to 1.228 Battlefield 1942 versions prior to 1.158 Battlefield 2 versions prior to 1.184 Battlefield Vietnam versions prior to 1.150 Call of Duty versions prior to 1.173 Call of Duty 2 versions prior to 1.108 DOOM 3 versions prior to 1.159 Enemy Territory versions prior to 1.167 Far Cry versions prior to 1.150 F.E.A.R. versions prior to 1.093 Joint Operations versions prior to 1.187 Quake III Arena versions prior to 1.150 Quake 4 versions prior to 1.181 Rainbow Six 3: Raven Shield versions prior to 1.169 Rainbow Six 4: Lockdown versions prior to 1.093 Return to Castle Wolfenstein versions prior to 1.175 Soldier of Fortune II versions prior to 1.183

Description A buffer overflow issue exists in the WebTool HTTP server component. This allows remote attackers to cause a denial of service via a long webkey parameter.

Recommendations For PunkBuster versions prior to 1.229, update to version 1.229 or later. For America's Army versions prior to 1.228, update to version 1.228 or later. For Battlefield 1942 versions prior to 1.158, update to version 1.158 or later. For Battlefield 2 versions prior to 1.184, update to version 1.184 or later. For Battlefield Vietnam versions prior to 1.150, update to version 1.150 or later. For Call of Duty versions prior to 1.173, update to version 1.173 or later. For Call of Duty 2 versions prior to 1.108, update to version 1.108 or later. For DOOM 3 versions prior to 1.159, update to version 1.159 or later. For Enemy Territory versions prior to 1.167, update to version 1.167 or later. For Far Cry versions prior to 1.150, update to version 1.150 or later. For F.E.A.R. versions prior to 1.093, update to version 1.093 or later. For Joint Operations versions prior to 1.187, update to version 1.187 or later. For Quake III Arena versions prior to 1.150, update to version 1.150 or later. For Quake 4 versions prior to 1.181, update to version 1.181 or later. For Rainbow Six 3: Raven Shield versions prior to 1.169, update to version 1.169 or later. For Rainbow Six 4: Lockdown versions prior to 1.093, update to version 1.093 or later. For Return to Castle Wolfenstein versions prior to 1.175, update to version 1.175 or later. For Soldier of Fortune II versions prior to 1.183, update to version 1.183 or later.

Exploit

Fix

Related Identifiers

CVE-2006-2587

Affected Products

America'S Army

Battlefield 1942

Battlefield 2

Battlefield Vietnam

Call Of Duty

Call Of Duty 2

Doom 3

Enemy Territory

F.E.A.R.

Farcry

Joint Operations

Punkbuster

Quake 4

Quake Iii Arena

Rainbow Six 3: Raven Shield

Rainbow Six 4: Lockdown

Return To Castle Wolfenstein

Soldier Of Fortune Ii

References · 12

• 🔥 http://aluigi.altervista.org/adv/pbwebbof-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1819 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2587 · Security Note
• http://secunia.com/advisories/20257 · Vendor Advisory
• http://evenbalance.com/index.php?page=support-all.php · Note
• http://vupen.com/english/advisories/2006/1940 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html · Note
• http://securityfocus.com/archive/1/434909/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26608 · Note
• http://securityfocus.com/bid/18106 · Note
• http://osvdb.org/25738 · Note
• http://securitytracker.com/id?1016155 · Note