CVE-2004-2371

Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://aluigi.altervista.org/adv/grboom-adv.txt	Exploit
http://www.securityfocus.com/archive/1/355051	Exploit
http://www.securityfocus.com/bid/9738
http://www.zone-h.org/advisories/read/id=4038	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
http://aluigi.altervista.org/adv/grboom-adv.txt	Exploit
http://www.securityfocus.com/archive/1/355051	Exploit
http://www.securityfocus.com/bid/9738
http://www.zone-h.org/advisories/read/id=4038	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15305

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:redstorm:desert_siege::::::::
	cpe:2.3:a:redstorm:ghost_recon:1.4:::::::*
	cpe:2.3:a:redstorm:the_sum_of_all_fears:1.1.1.0:::::::*

History

20 Nov 2024, 23:53

Type	Values Removed	Values Added
References	~~() http://aluigi.altervista.org/adv/grboom-adv.txt - Exploit~~	() http://aluigi.altervista.org/adv/grboom-adv.txt - Exploit
References	~~() http://www.securityfocus.com/archive/1/355051 - Exploit~~	() http://www.securityfocus.com/archive/1/355051 - Exploit
References	~~() http://www.securityfocus.com/bid/9738 -~~	() http://www.securityfocus.com/bid/9738 -
References	~~() http://www.zone-h.org/advisories/read/id=4038 - Exploit~~	() http://www.zone-h.org/advisories/read/id=4038 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/15305 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/15305 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:53

NVD link : CVE-2004-2371

Mitre link : CVE-2004-2371

CVE.ORG link : CVE-2004-2371

JSON object : View

Products Affected

redstorm

the_sum_of_all_fears
ghost_recon
desert_siege

CWE

NVD-CWE-Other

{"id": "CVE-2004-2371", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://aluigi.altervista.org/adv/grboom-adv.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/355051", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9738", "source": "cve@mitre.org"}, {"url": "http://www.zone-h.org/advisories/read/id=4038", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15305", "source": "cve@mitre.org"}, {"url": "http://aluigi.altervista.org/adv/grboom-adv.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/355051", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/9738", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zone-h.org/advisories/read/id=4038", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15305", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values."}], "lastModified": "2024-11-20T23:53:11.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redstorm:desert_siege:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13D72E2D-A8F2-4041-9C1E-34080305A0B9"}, {"criteria": "cpe:2.3:a:redstorm:ghost_recon:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B9DF11F-3922-4AFB-AC08-99A4AB9F8761"}, {"criteria": "cpe:2.3:a:redstorm:the_sum_of_all_fears:1.1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A29CE96F-EA92-49C3-A0AE-29169A6A2CDA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}