Vulnerability Details : CVE-2009-3591
Public exploit exists!
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.
Vulnerability category: Memory CorruptionInput validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2009-3591
Probability of exploitation activity in the next 30 days: 32.40%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2009-3591
-
Dopewars Denial of Service
Disclosure Date: 2009-10-05First seen: 2020-04-26auxiliary/dos/misc/dopewarsThe jet command in Dopewars 1.5.12 is vulnerable to a segmentation fault due to a lack of input validation. Authors: - Doug Prostko <dougtko@gmail.com>
CVSS scores for CVE-2009-3591
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2009-3591
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-3591
-
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033
-
http://www.securityfocus.com/archive/1/507012/100/0/threaded
-
http://www.securityfocus.com/bid/36606
Dopewars Server 'REQUESTJET' Message Remote Denial of Service VulnerabilityExploit
-
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033
Patch
Products affected by CVE-2009-3591
- cpe:2.3:a:ben_webb:dopewars:1.5.12:*:*:*:*:*:*:*