ID CVE-2006-1103
Summary engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.
References
Vulnerable Configurations
  • cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*
    cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*
  • cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*
    cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 18-10-2018 - 16:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 16986
bugtraq 20060306 Multiple vulnerabilities in Sauerbraten engine 2006_02_28
sreason 550
vupen ADV-2006-0848
xf sauerbraten-engineserver-dos(25087)
Last major update 18-10-2018 - 16:30
Published 09-03-2006 - 13:06
Last modified 18-10-2018 - 16:30
Back to Top