CVE-2007-4532

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2007-08-25

Last modified

2024-08-07

Affected products

• Soldat Dedicated Server (Michal Marcinkowski)
• Soldat Game Server (Michal Marcinkowski)

References

• http://aluigi.altervista.org/adv/soldatdos-adv.txt
• http://aluigi.org/poc/soldatdos.zip
• http://www.securityfocus.com/archive/1/477624/100/0/threaded
• http://www.securityfocus.com/bid/25426
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36232