www.quake.ie  

discord - the Ireland Gaming Club  
IEGC - www.irelandgamingclub.com  
Ireland Gaming Club - facebook  

Quake Live Server - quake.hagfish.ing  


search  
 quake.ie | anonymous | login | register

quake.ie main news security flaws in games
 12/02/2003   security flaws in games6614 views | 6 replies 
MindPhuck
Eric Mooney


Im drinking stuff donated to quake.ie
clan : n8z

posts : 1267
site owner


games on all windows, linux, and macos platforms that implement the unreal network gaming engine by epic games find themselves vulnerable to a laundry list of dangerous exploits. this battalion of vulnerabilities include local and remote dos, ddos, bounce attacks with spoofed udp packets, fake players, execution of malicious code without size limitations, unreal url crash, and more. "naturally this attack is very very simple, yet very very powerful" explains luigi. for detailed information please see the full advisory. a list of some affected applications can be found below:



- star trek: the next generation: klingon honor guard

- unreal

- the wheel of time

- deus ex

- mobile forces

- rune

- unreal tournament

- hired guns

- navy seals

- tnn outdoor pro hunter

- werewolf

- x-com: alliance

- adventure pinball

- america's army

- unreal tournament 2003

- future games (if the developers will not use a fixed

unreal engine) like deusex2, duke nukem forever,

postal 2, thief iii and xiii just for example



luigi has provided many proof's of concept and supporting code which can be found here.
 
 
you must be logged in to post replies.
click here to login.
click here to become a member.
click here to search.