Sauerbraten Game Engine sprintf() denial of service
| sauerbraten-sprintf-dos (25086) |  Low Risk |
Description:
Sauerbraten is vulnerable to a denial of service attack. By sending a long map name (.ogz file) to the 'sprintf()' function, a remote attacker could cause the server to deny access to any new player attempting to join the active game and cause the client machine to crash.
Consequences:
Denial of Service
Remedy:
For Gentoo Linux:
Refer to Gentoo Linux Security Announcement GLSA 2006-03-10 for patch, upgrade, or suggested workaround information. See References.
References:
- BugTraq Mailing List, Mon Mar 06 2006 - 14:29:51 CST : Multiple vulnerabilities in Sauerbraten engine 2006_02_28.
- BugTraq Mailing List, Mon Mar 06 2006 - 14:31:21 CST : Multiple vulnerabilities in Cube engine 2005_08_29.
- Cube Engine Web site: CUBE.
- Sauerbraten Game Engine Web site: Sauerbraten Game Engine.
- SourceForge.net: sauerbraten game engine.
- BID-16986: Sauerbraten Multiple Remote Vulnerabilities
- CVE-2006-1102: Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains .. sequences and has a certain length that prevents the addition of the .ogz extension.
- GLSA-200603-10: Cube: Multiple vulnerabilities
- SA19110: Cube Engine Buffer Overflow and Denial of Service
- SA19111: Sauerbraten Engine Multiple Vulnerabilities
- SA19199: Gentoo cube Buffer Overflow and Denial of Service
- VUPEN/ADV-2006-0847: Cube Multiple Memory Corruption and Denial of Service Vulnerabilities
- VUPEN/ADV-2006-0848: Sauerbraten Memory Corruption and Denial of Service Vulnerabilities
Platforms Affected:
- Cube Engine Cube Engine 2005_08_29 & prior
- Gentoo Linux
- Sauerbraten Game Engine Sauerbraten Game Engine 2006_02_28
Reported:
Mar 06, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net