Description
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
References
- 6771 vdb-entry
- http://www.pivx.com/luigi/adv/ueng-adv.txt
- ut-join-request-dos(11304) vdb-entry
- 20030205 Unreal engine: results of my research mailing-list
- 20030211 Re: Epic Games threatens to sue security researchers mailing-list