OSVDB ID: 25738

Title: PunkBuster WebTool webkey Authentication Overflow

Info

Disclosure
May 23, 2006

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A remote overflow exists in Punkbuster for Servers WebTool. The software fails to properly validate user-supplied input via the 'webkey' parameter, resulting in a buffer overflow. With a specially crafted URL, an attacker can crash the server and potentially run arbitrary code, resulting in a loss of availability and/or integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Public, Exploit Rumored
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Upgrade to version 1.229 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Even Balance, Inc.

PunkBuster Server WebTool

 1.228
1.158
1.184
1.150
1.173
1.108
1.159
1.167
1.093
1.187
1.181
1.169
1.175
1.183

References

Credit
  • Luigi Auriemma - aluigialtervista.org - http://aluigi.altervista.org


Direct URL: http://osvdb.org/25738