Info

Disclosure

Mar 07, 2006

Discovery

Unknown

Dates

Exploit

Mar 07, 2006

Solution

Unknown

Description

Alien Arena contains a flaw that may allow a remote denial of service. The issue is triggered when using a player with a long skin, weapon, or model name (about 110 characters suffices), and will result in loss of availability for any client who is already inside or joins the game server.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Red Planet Arena	Alien Arena 2006 Gold Edition	5.0
		4.0
		3.0
		2.0
		1.0

References

Milw0rm: 1564
Exploit Database: 1564
Bugtraq ID: 17028
Secunia Advisory ID: 19144
CVE ID: 2006-1147 (see also: NVD)
Related OSVDB ID: 23747 23748
VUPEN Advisory: ADV-2006-0882
Other Advisory URL: http://aluigi.altervista.org/adv/aa2k6x-adv.txt
Generic Exploit URL: http://aluigi.altervista.org/poc/aa2k6x.zip
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0880.html
Vendor URL: http://red.planetarena.org/

Credit

Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/23749

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Red Planet Arena

Alien Arena 2006 Gold Edition

References

Credit