CVE-2004-0735
Medal of Honor Allied Assault - Buffer Overflow via LAN Query and Connect Packet
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-0735.
PoCs published by Metasploit, millhouse, Luigi Auriemma, including Metasploit module exploits/windows/games/mohaa_getinfo.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Medal Of Honor Allied Assault's getinfo command via UDP. It constructs a malicious payload to achieve remote code execution by overwriting the return address and executing shellcode.
Description
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.
Exploits (4)
This exploit targets a stack-based buffer overflow in Medal Of Honor Allied Assault's getinfo command via UDP. It constructs a malicious payload to achieve remote code execution by overwriting the return address and executing shellcode.
This is a remote buffer overflow exploit for Medal of Honor Spearhead Dedicated Server (Linux) that leverages an alphanumeric shellcode to bypass character filtering and achieve remote code execution. It targets specific return addresses for different Linux distributions and spawns a bindshell on port 6000.
This exploit demonstrates a buffer overflow vulnerability in Medal of Honor game servers (AA <= 1.11v9, SH <= 2.15, BT <= 2.40b) via UDP port 12203. It includes payloads for both Windows and Linux targets, overwriting the return address with 0xdeadc0de to test for vulnerability.
This Metasploit module exploits a stack-based buffer overflow in Medal of Honor Allied Assault via the 'getinfo' command over UDP. It constructs a malicious payload with NOP sleds, shellcode, and a return address to achieve remote code execution.