PT-2006-4648 · Ufo2000 · Ufo2000

Luigi Auriemma · Published 2006-07-21 · Updated 2018-10-17 · CVE-2006-3788

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UFO2000 version prior to svn 1058

Description The issue is related to multiple buffer overflows in the multiplay.cpp file. These overflows can be triggered by a remote attacker through various means, including sending a long unit name, large values to specific functions, or a large mapdata GEODATA structure. This can potentially allow the execution of arbitrary code.

Recommendations For UFO2000 version prior to svn 1058, update to a version later than svn 1057 to resolve the issue. As a temporary workaround, consider restricting access to the Net::recv add unit, Net::recv rules, Net::recv select unit, Net::recv options, Net::recv unit data, and Net::recv map data functions until a patch is available. Avoid using large values or structures in these functions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3788

Affected Products

Ufo2000

References · 12

• http://gentoo.org/security/en/glsa/glsa-200702-10.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3788 · Security Note
• http://secunia.com/advisories/21091 · Vendor Advisory
• http://secunia.com/advisories/24297 · Note
• http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log · Note
• http://securityreason.com/securityalert/1259 · Note
• http://vupen.com/english/advisories/2006/2837 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27798 · Note
• http://securitytracker.com/id?1016503 · Note
• http://securityfocus.com/archive/1/440293/100/0/threaded · Note
• http://aluigi.altervista.org/adv/ufo2ko-adv.txt · Note
• http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log · Note