nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-11329 CVE-2018-11329
HIGH
Ethereum Game Ether Cartel 'DrugDealer' Function Vulnerability
Record summary
CVE-2018-11329 has a selected CVSS score of 7.5 (high).
Description
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · May 22, 2018 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
ether_cartelBrowse ethercartel / ether_cartel | VulnCheck | Version data not supplied | |
References
2peckshield.com
https://peckshield.com/2018/05/21/ceoAnyone