Secunia

Luigi Auriemma has reported some vulnerabilities in BomberClone, which can be exploited by malicious people to gain knowledge of system information or cause a DoS (Denial of Service).

1) Some unspecified errors within the "rscache_add()" function in pkgcache.c can be exploited to crash the game by sending specially crafted packets.

2) An error within the handling of packets in the "send_pkg()" function can be exploited to gain knowledge of system information by sending packets with a specially crafted "len" value.

3) Sending an error packet, which is originally used to kick clients, to a server can be exploited to shut it down immediately.

The vulnerabilities have been reported in version 0.11.6. Other versions may also be affected.

Solution
Update to version 0.11.7.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/bcloneboom-adv.txt

Deep Links
Links available in Customer Area