Dopewars Server 1.5.12 - Denial of Service

ExploitDBExploitDB exploitExploitEDB-10004

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

ExploitDB
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact provides a command-line exploit that sends a crafted REQUESTJET message to a Dopewars server to trigger a segmentation fault, resulting in denial of service.

Backdoor review

No backdoor observed in reviewed code

The PoC is a simple one-liner that sends a crafted string to a Dopewars server to trigger a segmentation fault. No backdoor, deceptive payload, or concealed operator-directed harm is present. The code is fully readable and performs only the advertised denial-of-service test.

ClassificationExploit
Model confidence95%
AuthenticationNot required
Languagesrubyshell
Target softwareDopewars Server 1.5.12
Attack typesdenial of service
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains a command-line exploit (ruby -e '...' | nc localhost 7902) that sends a malicious payload to trigger a segmentation fault in the target server, which is the definition of exploit code.

exploits/multiple/dos/10004.txt:7

Requirements

  • Network access to a Dopewars 1.5.12 server on port 7902exploits/multiple/dos/10004.txt:7
  • Ruby interpreter and netcat (nc) installed on the attacker's machineexploits/multiple/dos/10004.txt:7

Observed behavior

  • Generates a payload containing a REQUESTJET message with an invalid locationexploits/multiple/dos/10004.txt:7
  • Sends the crafted payload to the target Dopewars server on port 7902exploits/multiple/dos/10004.txt:7
  • Causes a segmentation fault in the Dopewars server, leading to denial of serviceexploits/multiple/dos/10004.txt:3
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Command Execution
ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902The PoC sends a crafted REQUESTJET message to the Dopewars server on port 7902 to trigger a segmentation fault. This is the advertised denial-of-service test and contains no hidden or unrelated behavior.exploits/multiple/dos/10004.txt:7
Review boundaries

What the analysis did not establish

  • The artifact is a single command line; no external dependencies or additional files are included.
  • The exploit targets a specific vulnerability (CVE-2009-3591) in Dopewars 1.5.12; effectiveness on other versions is unknown.
  • The payload is hardcoded and may require modification for different target configurations.
  • Only the supplied text file was reviewed; no binary or network traffic was analyzed.
  • The PoC targets a local server; no remote backdoor or persistence mechanism is present in the supplied evidence.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1