Description
GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use.
References
- 15254 third-party-advisory
- gamespy-sdk-cdkey-gain-access(20422) vdb-entry
- http://aluigi.altervista.org/adv/gskeyinuse-adv.txt
- 20050504 Gamespy cd-key validation system: Cd-key never in use mailing-list