CVE-2011-10020
HIGHKaillera Server < 0.86 - Unauthenticated Denial of Service via Malformed UDP Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-10020.
PoCs published by Sil3nt_Dre4m, including Metasploit module auxiliary/dos/windows/games/kaillera.
AI-analyzed exploit summary This Perl script exploits multiple buffer overflow vulnerabilities in various Kaillera clients by acting as a malicious Kaillera server. It targets specific emulators and Kaillera client versions, delivering a Metasploit-generated calc.exe shellcode payload.
Description
Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server’s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability.
Exploits (2)
This Perl script exploits multiple buffer overflow vulnerabilities in various Kaillera clients by acting as a malicious Kaillera server. It targets specific emulators and Kaillera client versions, delivering a Metasploit-generated calc.exe shellcode payload.
This Metasploit module exploits a denial-of-service vulnerability in Kaillera 0.86 by sending a malformed packet after the initial 'HELLO' packet, causing the server to crash. It verifies the crash by attempting to reconnect.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N