Secunia

Luigi Auriemma has reported some vulnerabilities in Cube Engine, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

1) A boundary error exists within the "sgetstr()" function in both the client and the server when copying received data to a fixed-sized buffer. This can be exploited to cause a buffer overflow and may allow arbitrary code execution.

2) A boundary error in the "sgetstr()" and "getint()" functions may be exploited to cause the client or the server to read unallocated memory, potentially causing a crash.

Note: A design error that causes game clients to exit whenever a malicious user specifies a non-existing map file has also been reported.

The vulnerabilities have been reported in versions 2005_08_29 and prior.

Solution
Host network games only within trusted networks and do not connect to non-trusted game servers.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/evilcube-adv.txt

Deep Links
Links available in Customer Area