PT-2007-6330 · Monolith · Monolith Lithtech Engine

Published 2007-10-06 · Updated 2018-10-15 · CVE-2007-5247

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Monolith Lithtech engine versions 1.08 and earlier

Description: The issue concerns multiple format string vulnerabilities in the Monolith Lithtech engine. These vulnerabilities can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in a daemon crash. The exploitation can occur through format string specifiers in specific packets, including a PB Y packet to the YPG server on UDP port 27888 or a PB U packet to UCON on UDP port 27888.

Recommendations: For Monolith Lithtech engine versions 1.08 and earlier, consider disabling Punkbuster (PB) until a patch is available to prevent exploitation. Additionally, restrict access to the YPG server on UDP port 27888 and UCON on UDP port 27888 to minimize the risk of exploitation.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2007-5247

Affected Products

Monolith Lithtech Engine

References · 8

• 🔥 http://aluigi.org/poc/fearfspb.zip · Exploit
• 🔥 http://aluigi.altervista.org/adv/fearfspb-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5247 · Security Note
• http://osvdb.org/45530 · Note
• http://securityfocus.com/archive/1/481231/100/0/threaded · Note
• http://osvdb.org/45531 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36900 · Note
• http://securityreason.com/securityalert/3197 · Note