CVE-2006-0047

Freeciv < 2.0.8 - Denial of Service via Crafted Packets with Negative Compressed Size

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0047. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This exploit targets a memory allocation vulnerability in Freeciv <= 2.0.7 by sending a maliciously crafted packet with an excessively large size value, causing a denial-of-service (DoS) condition. The code connects to the target server and sends a jumbo packet designed to trigger a crash or freeze.

Description

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Luigi Auriemma · cdoswindows

https://www.exploit-db.com/exploits/1557

View Code ZIP pw:eip

This exploit targets a memory allocation vulnerability in Freeciv <= 2.0.7 by sending a maliciously crafted packet with an excessively large size value, causing a denial-of-service (DoS) condition. The code connects to the target server and sends a jumbo packet designed to trigger a crash or freeze.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Freeciv <= 2.0.7

No auth needed

Prerequisites: Network access to the target server · Freeciv server running on port 5555 (default)

MITRE ATT&CK