5
CVSSv2

CVE-2006-0047

Published: 07/03/2006 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

packets.c in Freeciv 2.0 prior to 2.0.8 allows remote malicious users to cause a denial of service (server crash) via crafted packets with negative compressed size values.

Vulnerable Product Search on Vulmon Subscribe to Product

freeciv freeciv 2.0.0

freeciv freeciv 2.0.1

freeciv freeciv 2.0.2

freeciv freeciv 2.0.3

freeciv freeciv 2.0.7

freeciv freeciv 2.0.7a

freeciv freeciv 2.0.4

freeciv freeciv 2.0.5

freeciv freeciv 2.0.6

Vendor Advisories

Debian Bug report logs - #355211 freeciv-server: security hole Package: freeciv-server; Maintainer for freeciv-server is Debian Games Team <pkg-games-devel@listsaliothdebianorg>; Source for freeciv-server is src:freeciv (PTS, buildd, popcon) Reported by: Jason Dorje Short <jdorje@userssfnet> Date: Sat, 4 Mar 20 ...
Luigi Auriemma discovered a denial of service condition in the free Civilization server that allows a remote user to trigger a server crash The old stable distribution (woody) is not affected by this problem For the stable distribution (sarge) this problem has been fixed in version 201-1sarge1 For the unstable distribution (sid) this problem h ...

Exploits

/* by Luigi Auriemma */ #include <stdioh> #include <stdlibh> #include <stringh> #include <timeh> #ifdef WIN32 #include <winsockh> /* Header file used for manage errors in Windows It support socket and errno too (this header replace the previous sock_errXh) */ #include <stringh> #include & ...