CVE-2006-1010 Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sen...
MediumCVSS 6.4
EPSS 17.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crossfire | = 1.7.0 | No fix listed |
| crossfire | = 1.8.0 | No fix listed |
| debian/crossfire(Debian:12) | < 1.9.0-1 | 1.9.0-1 |
| debian/crossfire(Debian:13) | < 1.9.0-1 | 1.9.0-1 |
| debian/crossfire(Debian:14) | < 1.9.0-1 | 1.9.0-1 |
References
- aluigi.altervista.org exploit vendor-advisory
- cvs.sourceforge.net patch
- 19044 exploit patch third-party-advisory vendor-advisory
- 19194 third-party-advisory
- 19785 third-party-advisory
- DSA-1001 vendor-advisory
- GLSA-200604-11 vendor-advisory
- 23549 vdb-entry
- 16883 vdb-entry
- ADV-2006-0760 vdb-entry
- crossfire-oldsocketmode-bo(24932) vdb-entry
- Debian Security Tracker CVE-2006-1010 vendor-advisory