Unreal Engine Secure Query Remote Overflow

critical Nessus Plugin ID 12285

Synopsis

The remote host has an application that may arbitrary code execution on the remote system.

Description

The remote host was running a game server with the Unreal Engine on it. The game server is vulnerable to a remote attack which allows for arbitrary code execution.

Note that Nessus disabled this service while testing for this flaw.

Solution

Epic has released a patch for this issue.

Plugin Details

Severity: Critical

ID: 12285

File Name: unreal_dos.nasl

Version: 1.18

Type: remote

Published: 6/22/2004

Updated: 8/6/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 6/19/2004

Exploitable With

CANVAS (CANVAS)

Metasploit (Unreal Tournament 2004 "secure" Overflow (Win32))

Reference Information

CVE: CVE-2004-0608

BID: 10570