packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.

Luigi Auriemma discovered a denial of service condition in the free Civilization server that allows a remote user to trigger a server crash.

Secunia reports :

Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the handling of the packet length in 'common/packets.c'. This can be exploited to crash the Freeciv server via a specially- crafted packet with the size set to '0xffff'.

The remote host is affected by the vulnerability described in GLSA-200603-11 (Freeciv: Denial of Service)

    Luigi Auriemma discovered that Freeciv could be tricked into the     allocation of enormous chunks of memory when trying to uncompress     malformed data packages, possibly leading to an out of memory condition     which causes Freeciv to crash or freeze.
  Impact :

    A remote attacker could exploit this issue to cause a Denial of     Service by sending specially crafted data packages to the Freeciv game     server.
  Workaround :

    Play solo games or restrict your multiplayer games to trusted     parties.

A Denial of Service vulnerability was discovered in the civserver component of the freeciv game on certain incoming packets.

The updated packages have been patched to fix this issue.

ID	Name	Product	Family	Severity
22860	Debian DSA-994-1 : freeciv - denial of service	Nessus	Debian Local Security Checks	medium
22453	FreeBSD : freeciv -- Packet Parsing Denial of Service Vulnerability (339fbbc1-4d23-11db-b48d-00508d6a62df)	Nessus	FreeBSD Local Security Checks	medium
21084	GLSA-200603-11 : Freeciv: Denial of Service	Nessus	Gentoo Local Security Checks	medium
21028	Mandrake Linux Security Advisory : freeciv (MDKSA-2006:053)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2006-0047

high

Tenable Plugins

medium

medium

medium

medium