bugtraq - Crash in Alpha Black Zero 1.04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040929211157.05f4787d.aluigi@autistici.org>
Date: Wed, 29 Sep 2004 21:11:57 +0000
From: Luigi Auriemma <aluigi@...istici.org>
To: bugtraq@...urityfocus.com, bugs@...uritytracker.com,
	news@...uriteam.com, full-disclosure@...ts.netsys.com,
	vuln@...unia.com
Subject: Crash in Alpha Black Zero 1.04



#######################################################################

                             Luigi Auriemma

Application:  Alpha Black Zero: Intrepid Protocol
              http://www.playlogicgames.nl/abz/
Versions:     <= 1.04
Platforms:    Windows
Bug:          crash
Risk:         medium
Exploitation: remote, versus server
Date:         29 September 2004
Author:       Luigi Auriemma
              e-mail: aluigi@...ervista.org
              web:    http://aluigi.altervista.org


#######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduction
===============


Alpha Black Zero (ABZ) is a third person strategic shooter developed by
Khaeon (http://www.khaeon.nl) and released in August 2004.


#######################################################################

======
2) Bug
======


Like any existent game, also ABZ supports a maximum nuber of players in
multiplayer mode.
The problem is that players are not limited by the server which crashs
if too much clients tries to join.
Then the possibility to emulate a join request with only one UDP packet
makes the bug very easy to exploit.


#######################################################################

===========
3) The Code
===========


http://aluigi.altervista.org/poc/abzboom.zip


#######################################################################

======
4) Fix
======


No fix.
The game is no longer supported.


#######################################################################


--- 
Luigi Auriemma
http://aluigi.altervista.org