Vulnerabilities > CVE-2005-0325 - Remote Denial Of Service vulnerability in Techland Xpand Rally 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Xpand Rally <= 1.0.0.0 (Server/Clients) Crash Exploit. CVE-2005-0325. Dos exploit for windows platform |
| id | EDB-ID:780 |
| last seen | 2016-01-31 |
| modified | 2005-01-31 |
| published | 2005-01-31 |
| reporter | Luigi Auriemma |
| source | https://www.exploit-db.com/download/780/ |
| title | Xpand Rally <= 1.0.0.0 Server/Clients Crash Exploit |
References
- http://aluigi.altervista.org/adv/xprallyboom-adv.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html
- http://marc.info/?l=bugtraq&m=110720064811485&w=2
- http://secunia.com/advisories/14073
- http://securitytracker.com/id?1013043
- http://www.securityfocus.com/bid/12409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19150