header-logo
Suggest Exploit
vendor:
Unreal Tournament
by:
SecurityFocus
7.5
CVSS
HIGH
Amplifyer Flooding Attack
N/A
CWE
Product Name: Unreal Tournament
Affected Version From: Unreal Tournament
Affected Version To: Unreal Tournament
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft Windows and Linux
2002

Unreal Tournament Amplifyer Flooding Attack

It is possible to use an Unreal Tournament server as an amplifyer in a flooding attack, by transmiting multiple UDP packets with a spoofed victim IP address. The server will make repeated attempts to initiate a connection with the specified address, consuming network resources.

Mitigation:

Network administrators should ensure that the Unreal Tournament server is not exposed to untrusted networks.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5148/info

Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play.

It is possible to use an Unreal Tournament server as an amplifyer in a flooding attack, by transmiting multiple UDP packets with a spoofed victim IP address. The server will make repeated attempts to initiate a connection with the specified address, consuming network resources. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21593.tgz