Secunia

Two vulnerabilities have been reported in Roger Wilco, which can be exploited by malicious people to cause a DoS (Denial of Service) on a server or other clients that potentially also may be compromised.

The first vulnerability is caused due to a boundary error in the client when handling nicknames. This can be exploited by setting an overly long nickname (516 bytes in Mark 1d3 and 33 bytes in 1.4.1.6), which may cause a buffer overflow on the server and other clients connected to it resulting in a crash and potentially allowing execution of arbitrary code.

This vulnerability also affects version 1.4.1.2 when supplying a nickname longer than 1022 bytes. However, a buffer overflow is only caused on the server and not on client systems as well.

The second vulnerability can be exploited by a malicious client to cause a DoS on a server by sending a partial "join-packet" instead of a full one. This will cause the server to freeze until the client is disconnected.

This vulnerability only affects versions Mark 1d3 and 1.4.1.6.

NOTE: The dedicated server version is not affected by the vulnerabilities.

Solution
Use another product.

Provided and/or discovered by
Auriemma Luigi

Changelog
Further details available in Customer Area

Original Advisory
http://www.pivx.com/luigi/adv/wilco-adv.txt
http://aluigi.altervista.org/adv/wilco-remix-adv.txt

Deep Links
Links available in Customer Area