CVE-2010-3439: Input Validation
It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command.
Other sources
Richard Stanway posted on QuakeDev Forums page: [1] http://www.quakedev.com/forums/index.php?topic=53.0
two new vulnerabilities affecting also code, as present in Alien Arena (from [1]):
A, "Multiple auto downloading DoS conditions: By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms."
Proposed patch: ---------------- [2] http://corent.proboards.com/index.cgi?action=gotopost&board=bugreport&thread=4761&post=44624
Public PoC: ----------- [3] http://corent.proboards.com/index.cgi?action=gotopost&board=bugreport&thread=4761&post=44611 => cmd download maps/tca-zion.bsp -123456789
CVSSv2 Score: 4.0/AV:N/AC:L/Au:S/C:N/I:N/A:P -------------
B, "Server-side cvar expansion: By passing an unexpanded string containing $macros to the server, the server will expand it using it's cvars. This can be used to leak sensitive information such as the rconpassword cvar."
Proposed patch: --------------- NA
Public PoC: ----------- [4] http://www.quakedev.com/forums/index.php?topic=53.0 => At the client console: "say $rconpassword"
CVSSv2 Score: 4.0/ AV:N/AC:L/Au:S/C:P/I:N/A:N -------------
References: ----------- [5] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575621
CVE Request: ------------ [6] http://www.openwall.com/lists/oss-security/2010/03/29/3
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2010-3439?
CVE-2010-3439 is a denial-of-service vulnerability in Alien Arena 7.33 that allows an attacker to crash the server by sending invalid parameters to the download command.
What is the severity of CVE-2010-3439?
CVE-2010-3439 is considered a moderate severity vulnerability due to its potential to cause service disruption.
How do I fix CVE-2010-3439?
To fix CVE-2010-3439, upgrade Alien Arena to version 7.66 or later, as the vulnerability has been addressed in these releases.
Which versions of Alien Arena are affected by CVE-2010-3439?
CVE-2010-3439 affects Alien Arena version 7.33 specifically, along with versions prior to 7.66.
Are there any workarounds for CVE-2010-3439?
While the recommended fix is to upgrade, a temporary workaround could involve restricting access to the download command or implementing input validation.