Secunia

Luigi Auriemma has reported a vulnerability in Empire Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to boundary error in the "client_cmd()" function when adding text strings sent by a user to the "player->client" buffer. This can be exploited to cause an out-of-bounds memory access, which crashes the server.

The vulnerability has been reported in 4.3.2. Prior versions may also be affected.

Solution
The vulnerability has been fixed in the CVS repositories.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/empiredos-adv.txt
http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/login.c?revision=1.38&view=markup

Deep Links
Links available in Customer Area