header-logo
Suggest Exploit
vendor:
Gameport
by:
SecurityFocus
8.5
CVSS
HIGH
Bypass connection time limit restrictions, Access to server's administrative password, Execute arbitrary applications on a client
284, 287, 264
CWE
Product Name: Gameport
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005

Gameport Multiple Vulnerabilities

Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable client. An attacker can bypass the connection time limit restrictions imposed by a server. A local attacker can gain access to a server's administrative password. A server can execute arbitrary applications on a client. The following specific issues were reported: An attacker can bypass the connection time limit restrictions imposed by a server. A local attacker can gain access to a server's administrative password. A server can execute arbitrary applications on a client.

Mitigation:

Ensure that the server is configured to use strong authentication and access control mechanisms. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption. Ensure that the server is configured to use secure protocols and encryption.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/12006/info

Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable client.

The following specific issues were reported:

An attacker can bypass the connection time limit restrictions imposed by a server.

A local attacker can gain access to a server's administrative password.

A server can execute arbitrary applications on a client. 

^^#CALL#:CMD.exe 
cqrsecured