PT-2006-4649 · Ufo2000 · Ufo2000

Luigi Auriemma · Published 2006-07-21 · Updated 2018-10-17 · CVE-2006-3789

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UFO2000 version prior to svn 1058

Description The issue is related to multiple array index errors in certain functions within the multiplay.cpp file. Specifically, the errors occur in the recv rules, recv select unit, recv options, and recv unit data functions. These errors can be exploited by remote attackers to execute arbitrary code and cause a denial of service, resulting in an opponent crash. This can be achieved by sending certain packet data that specifies an out-of-bounds index.

Recommendations For UFO2000 version prior to svn 1058, update to a version later than svn 1057 to resolve the issue. As a temporary workaround, consider restricting access to the multiplay functionality until a patch is available.

Fix

Related Identifiers

CVE-2006-3789

Affected Products

Ufo2000

References · 12

• http://gentoo.org/security/en/glsa/glsa-200702-10.xml · Vendor Advisory
• http://secunia.com/advisories/21091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3789 · Security Note
• http://secunia.com/advisories/24297 · Note
• http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log · Note
• http://securityreason.com/securityalert/1259 · Note
• http://vupen.com/english/advisories/2006/2837 · Note
• http://securitytracker.com/id?1016503 · Note
• http://securityfocus.com/archive/1/440293/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27802 · Note
• http://aluigi.altervista.org/adv/ufo2ko-adv.txt · Note
• http://securityfocus.com/bid/19035 · Note