Genecys - exploit.company

vendor:

Genecys

by:

milw0rm

7,5

CVSS

HIGH

Buffer Overflow/NULL Pointer

119

CWE

Product Name: Genecys

Affected Version From: 0.2

Affected Version To: 0.2

Patch Exists: YES

Related CWE: CVE-2006-2445

CPE: a:genecys_project:genecys

Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2007-0356/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-CESA-2007-0356/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2006

Genecys <= 0.2 (BoF/NULL pointer) Denial of Service Exploit

Genecys is a 3D MMORPG server written in C++. A buffer overflow vulnerability exists in the Genecys server version 0.2. When a client sends a packet with a large amount of data, the server will crash due to a NULL pointer dereference.

Mitigation:

Upgrade to the latest version of Genecys.

Source

Genecys <= 0.2 (BoF/NULL pointer) Denial of Service Exploit

Mitigation:

Exploit-DB raw data: