Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted join packet to UDP port 27960, probably related to an invalid nickname command.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
| Advisory | Patch | Confirmed | Link |
|---|---|---|---|
| sunage-unspecified-dos(43249) | |||
| ADV-2008-1903 | |||
| 29889 | |||
| http://aluigi.org/poc/sunagex.zip | |||
| http://aluigi.altervista.org/adv/sunagex-adv.txt |