VulnerabilityModified
CVE-2003-1354
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield…
MEDIUM 5.0EPSS 6.20%
Does this matter?
Lower severity and a low EPSS score (6.20%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 6.20% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- gamespy3d/gamespy 3d
- Source
- cve@mitre.org
References
- http://seclists.org/lists/bugtraq/2003/Jan/0178.html
- http://www.pivx.com/kristovich/adv/mk001/
- http://www.securiteam.com/securitynews/5EP0O0K8UO.html
- http://www.securityfocus.com/bid/6636Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11084
- http://seclists.org/lists/bugtraq/2003/Jan/0178.html
- http://www.pivx.com/kristovich/adv/mk001/
- http://www.securiteam.com/securitynews/5EP0O0K8UO.html
- http://www.securityfocus.com/bid/6636Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11084
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.