Lucene search

MitreCVE-2007-4443

HistoryAug 21, 2007 - 12:17 a.m.

CVE-2007-4443

2007-08-2100:17:00

mitre

web.nvd.nist.gov

ucc dedicated server

unreal engine

windows

denial of service

cve-2007-4443

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.054

Percentile

93.2%

JSON

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the Content-Type field, (3) a HEAD request, and possibly other unspecified vectors.

Affected configurations

Nvd

Node

epic_gamesunreal_engineMatch2003

epic_gamesunreal_engineMatch2004

VendorProductVersionCPE
epic_gamesunreal_engine2003cpe:2.3:a:epic_games:unreal_engine:2003:*:*:*:*:*:*:*
epic_gamesunreal_engine2004cpe:2.3:a:epic_games:unreal_engine:2004:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
epic_games	unreal_engine	2003	cpe:2.3:a:epic_games:unreal_engine:2003:::::::*
epic_games	unreal_engine	2004	cpe:2.3:a:epic_games:unreal_engine:2004:::::::*

References

aluigi.org/adv/unrwebdos-adv.txt

aluigi.org/poc/unrwebdos.zip

secunia.com/advisories/26506

securityreason.com/securityalert/3039

www.securityfocus.com/archive/1/477026/100/0/threaded

www.securityfocus.com/archive/1/478053/100/200/threaded

www.securityfocus.com/archive/1/478064/100/200/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/36103

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.054

Percentile

93.2%

JSON

Related for CVE-2007-4443