CVE-2005-0325

Xpand Rally 1.0.0.0 - Denial of Service via Malformed Packet

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0325. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in Xpand Rally <= 1.0.0.0, causing a denial-of-service (DoS) by sending a malformed UDP packet. The PoC includes both server and client crash capabilities.

Description

Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Luigi Auriemma · cdoswindows
https://www.exploit-db.com/exploits/780

This exploit targets a memory corruption vulnerability in Xpand Rally <= 1.0.0.0, causing a denial-of-service (DoS) by sending a malformed UDP packet. The PoC includes both server and client crash capabilities.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Xpand Rally <= 1.0.0.0
No auth needed
Prerequisites: Network access to the target server or clients
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit, Patch mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12409
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/19150
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013043
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14073
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110720064811485&w=2

Scores

EPSS 0.0374
EPSS Percentile 88.4%

Details

Status published
Products (1)
techland/xpand_rally 1.0
Published May 02, 2005
Tracked Since Feb 18, 2026