CVE-2006-1103
Sauerbraten 2006_02_28 - Denial of Service via Incomplete Client Join Timeout
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1103. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit targets multiple vulnerabilities in Sauerbraten <= 2006_02_28, including buffer overflows and invalid memory access. It uses the ENet library to craft malicious packets for attacks such as sgetstr() buffer overflow and directory traversal.
Description
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.
Exploits (1)
This exploit targets multiple vulnerabilities in Sauerbraten <= 2006_02_28, including buffer overflows and invalid memory access. It uses the ENet library to craft malicious packets for attacks such as sgetstr() buffer overflow and directory traversal.