20030122 PivX Multi-Vendor Game Server dDoS Advisorymailing list
http://seclists.org/lists/bugtraq/2003/Jan/0178.html CVE-2003-1354
GameSpy 3D 2.62 - Packet Amplification Denial of Service
Record summary
CVE-2003-1354 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGameSpy 3D 2.62 - Packet Amplification Denial of ServiceExploitDB exploitby Mike KristovichNot analyzed1 file
References
6pivx.com
http://www.pivx.com/kristovich/adv/mk001 securiteam.com
http://www.securiteam.com/securitynews/5EP0O0K8UO.html 6636vdb entry
http://www.securityfocus.com/bid/6636 battlefield-udp-query-dos(11084)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11084 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1354