Luigi Auriemma has reported multiple vulnerabilities in Hired Team: Trial, which can be exploited by malicious people to compromise a vulnerable system, cause a DoS (Denial of Service), and bypass certain security restrictions.

1) A format string error in the handling of messages can be exploited to execute arbitrary code by sending a specially crafted message to a vulnerable server.

2) An input validation error in the handling of unexpected incoming traffic can be exploited to cause a game to be interrupted by sending some malformed data in a UDP datagram to port 29200 / 29220.

3) An input validation error in the handling of the status command can be exploited to crash a vulnerable server.

An improper behaviour, where a user can kick other users and administrators, has also been reported.

The vulnerabilities have been reported in versions 2.0 and 2.200. Other versions may also be affected.

Solution
Host games on a trusted network only.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/hteam-adv.txt

Deep Links
Links available in Customer Area