CVE-2006-4006

The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bomberclone:bomberclone:*:*:*:*:*:*:*:*
cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*
cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*
cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*

Information

Published : 2006-08-07 12:04

Updated : 2017-07-19 18:32


NVD link : CVE-2006-4006

Mitre link : CVE-2006-4006


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

bomberclone

  • bomberclone