CVE-2004-1216
Kreed <= 1.05 - Denial of Service via Long Nickname or Model Type
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1216. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit targets multiple vulnerabilities in Kreed <= 1.05, including a format string vulnerability in client nicknames, a DoS via oversized packets, and script dialog errors. The code includes functional exploit logic for these attacks, with network communication and payload construction.
Description
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server freeze) via a long (1) nickname or (2) model type, which generates dialog boxes on the server that must be manually handled before the server continues the game.
Exploits (1)
This exploit targets multiple vulnerabilities in Kreed <= 1.05, including a format string vulnerability in client nicknames, a DoS via oversized packets, and script dialog errors. The code includes functional exploit logic for these attacks, with network communication and payload construction.