Exploitation Summary
EIP tracks 5 public exploits for CVE-2004-0608.
PoCs published by Metasploit, onetwo, stinko, including Metasploit module exploits/windows/games/ut2004_secure.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature via a maliciously crafted UDP packet. It targets a specific return address to achieve remote code execution.
Description
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.
Exploits (5)
This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature via a maliciously crafted UDP packet. It targets a specific return address to achieve remote code execution.
This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature via a crafted UDP packet. It targets specific Linux builds (3120, 3186) and delivers a payload for remote code execution.
This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature via a single UDP packet. It targets specific Linux builds (3120, 3186) and includes a check function to verify vulnerability.
This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature via a crafted UDP packet. It targets specific builds and achieves remote code execution by overwriting the EIP with a JMP ESP instruction.
This is a Metasploit module exploiting a buffer overflow in Unreal Tournament 2004's GameSpy secure query feature on Linux. It sends a maliciously crafted UDP packet to trigger remote code execution by overwriting the return address and injecting shellcode.