CVE-2009-3591
Dopewars 1.5.12 - Denial of Service via Invalid REQUESTJET Message
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3591.
PoCs published by Doug Prostko, including Metasploit module auxiliary/dos/misc/dopewars.
AI-analyzed exploit summary This exploit leverages a denial-of-service vulnerability in Dopewars by sending malformed input to the server, causing it to crash. The PoC uses a Ruby one-liner to generate the payload and netcat to deliver it to the target port.
Description
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
Exploits (3)
This exploit leverages a denial-of-service vulnerability in Dopewars by sending malformed input to the server, causing it to crash. The PoC uses a Ruby one-liner to generate the payload and netcat to deliver it to the target port.
The exploit demonstrates a segmentation fault in Dopewars 1.5.12 by sending malformed input to the 'jet' command via a network connection. The lack of input validation causes the application to crash, leading to a denial of service (DoS).
This Metasploit module exploits a segmentation fault vulnerability in Dopewars 1.5.12 by sending a malformed packet to the 'jet' command, causing a denial of service (DoS). The exploit connects to the target server, sends the crafted packet, and verifies the crash by attempting to reconnect.