Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Toribash 拒绝服务漏洞
Vulnerability Description
"Toribash是一款流行的格斗游戏。 Toribash 服务器在用户在加入服务器时，会为其分配ID -1，在调用ENTER命令之前不会再分配任何数据。攻击者可以将ID设置为-1加入到服务器并发送GRIP命令强制服务器处理请求，但包含客户端接收到值的结构为空，因此会失败： sscanf("0 0\n", "%i %i", &client.integer1, &client.integer2); 这里"0 0\n"是客户端所发送GRIP命令的第二部分(GRIP -1;0 0\n")，client.inte
CVSS Information
N/A
Vulnerability Type
N/A