Info

Disclosure

Jul 02, 2003

Discovery

Unknown

Dates

Exploit

Jul 02, 2003

Solution

Unknown

Description

Roger Wilco Mark contains a flaw that may allow a remote denial of service. The issue is triggered when sending a partial 'join-packet' with a specially crafted nickname, which causes the server to hang resulting in a loss of availability.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade to version 1.4.1.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

GameSpy Industries

Roger Wilco Mark

I.d Rev 3

References

Security Tracker: 1007102
ISS X-Force ID: 12491
Related OSVDB ID: 16704
Bugtraq ID: 8078
Other Advisory URL: http://aluigi.altervista.org/adv/wilco-adv.txt
Vendor URL: http://www.rogerwilco.com

Credit

Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/36218