CVE-2004-1587

Monolith Productions Games - Denial of Service via Long Gamespy Query

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1587. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in multiple Monolith games via UDP port 27888. It sends a malformed packet with an embedded return address to trigger the overflow and checks the server's response to confirm vulnerability.

Description

Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Luigi Auriemma · cdoswindows

https://www.exploit-db.com/exploits/571

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in multiple Monolith games via UDP port 27888. It sends a malformed packet with an embedded return address to trigger the overflow and checks the server's response to confirm vulnerability.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Alien versus Predator 2 (1.0.9.6), Blood 2 (2.1), No One Lives Forever (1.004), Shogo (2.2)

No auth needed

Prerequisites: Network access to the target server · UDP port 27888 open and accessible

MITRE ATT&CK