CVE-2006-1046

monopd 0.9.3 - Denial of Service via XML Output Escaping

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1046. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided content describes a remote denial-of-service vulnerability in the Monopd game server (CVE-2006-1046). It references a SecurityFocus BID and a GitLab link to a binary exploit but does not include actual exploit code.

Description

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large number of characters that are escaped when Monopd produces XML output.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdosmultiple
https://www.exploit-db.com/exploits/27365

The provided content describes a remote denial-of-service vulnerability in the Monopd game server (CVE-2006-1046). It references a SecurityFocus BID and a GitLab link to a binary exploit but does not include actual exploit code.

Classification
Writeup 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Theoretical
Target: Monopd game server
No auth needed
Prerequisites: Network access to the Monopd server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0844
Exploit, Patch, Vendor Advisory x_refsource_misc
http://aluigi.altervista.org/adv/monopdx-adv.txt
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19133
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16981
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25161

Scores

EPSS 0.0455
EPSS Percentile 90.4%

Details

Status published
Products (1)
monopd/monopd 0.9.3
Published Mar 07, 2006
Tracked Since Feb 18, 2026