CVE-2008-3597
HIGHSkulltag < 0.97d2-RC6 - Denial of Service via Command 29 Packet
Title source: llmDescription
Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a "command 29" packet when the player is not in the game.
References (5)
Core 5
Core References
Broken Link, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31427
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44363
Broken Link vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2325
Broken Link x_refsource_misc
http://aluigi.altervista.org/adv/skulltagod-adv.txt
Broken Link, Patch x_refsource_confirm
http://skulltag.com/forum/viewtopic.php?f=1&t=14716
Scores
CVSS v3
7.5
EPSS
0.0284
EPSS Percentile
84.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (2)
skulltag/skulltag
0.97d2 (3 CPE variants)
skulltag/skulltag
< 0.97d2
Published
Aug 12, 2008
Tracked Since
Feb 18, 2026