Description
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP datagram.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Roger Wilco Server 1.4.1 - UDP Datagram Handling Denial of Service EDB-23902 · dos · Mar 31, 2004 · verified
GitHub 1 repository
-
ParallelVisions/DoSTool ★ 2 · Jan 25, 2023
DDoS Tool which exploits vulnerability CVE-2004-2449 from vendor GameSpy (now known as OpenSpy). User is prompted for input IP address, and port. (NOTE: Please use this responsibly, I made this as a …
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20040331 RogerWilco: new funny bugs mailing-list
- roger-wilco-udp-dos(15716) vdb-entry
- http://aluigi.altervista.org/adv/wilco-again-adv.txt
- 4833 vdb-entry
- 10022 vdb-entry
- 11270 third-party-advisory