The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability

vendor:

mvdsv

by:

SecurityFocus

7,5

CVSS

HIGH

Buffer Overrun

119

CWE

Product Name: mvdsv

Affected Version From: 0.30

Affected Version To: 0.30

Patch Exists: No

Related CWE: CVE-2002-0392

CPE: o:mvdsv:mvdsv:0.30

Metasploit: https://www.rapid7.com/db/vulnerabilities/apache-httpd-cve-2002-0392/, https://www.rapid7.com/db/vulnerabilities/http-apache2-chunked-transfer-int-bof/, https://www.rapid7.com/db/vulnerabilities/apache-httpd-1_3_x-apache-chunked-encoding-vulnerability-cve-2002-0392/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2002

The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability

The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability. This vulnerability is caused by a lack of bounds checking when processing certain packets. An attacker can exploit this vulnerability by sending a specially crafted packet to the vulnerable server. This could permit execution of arbitrary code in the context of the server.

Mitigation:

No known mitigation or remediation for this vulnerability

Source

The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability

Mitigation:

Exploit-DB raw data: