CVE-2005-4584

bzflag_server < 2.0.4 - Denial of Service via Malformed Callsign

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4584. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in BZFlag servers <= 2.0.4 by sending a maliciously crafted packet with oversized random strings, causing a crash. The PoC verifies server version and attempts to trigger the vulnerability.

Description

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\0) character.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Luigi Auriemma · cdosmultiple

https://www.exploit-db.com/exploits/1390

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in BZFlag servers <= 2.0.4 by sending a maliciously crafted packet with oversized random strings, causing a crash. The PoC verifies server version and attempts to trigger the vulnerability.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: BZFlag <= 2.0.4

No auth needed

Prerequisites: Network access to the target BZFlag server

MITRE ATT&CK