----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
Babo Violent Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA26453

VERIFY ADVISORY:
http://secunia.com/advisories/26453/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
>From remote

SOFTWARE:
Babo Violent 2.x
http://secunia.com/product/15309/

DESCRIPTION:
Luigi Auriemma has discovered some vulnerabilities in Babo Violent,
which can be exploited by malicious people to cause a DoS (Denial of
Service) or to compromise a vulnerable system.

1) A vulnerability exists in the processing of data packets with IDs
equal to 0xca, 0xcb, 0xcc, 0xce, 0xcf, or 0xd0. This can be exploited
to crash a Babo Violent server by setting the first byte in the packet
to a number greater than 0x27.

2) A format string error exists in the processing of messages. This
can be exploited to execute arbitrary code by sending a specially
crafted message to a Babo Violent server.

NOTE: The same error reportedly exists also in the processing of the
administrator login.

3) An error in the processing of map names can be exploited to crash
the Babo Violent server by requesting an inexistent map.  

4) An error in the processing of UDP packets can be exploited to
crash Babo Violent servers or clients by sending a specially crafted
UDP packet containing an invalid size.

The vulnerabilities are confirmed in version 2.08.00. Other versions
may also be affected.

SOLUTION:
Use Babo Violent clients and servers only in a trusted network
environment.

PROVIDED AND/OR DISCOVERED BY:
Luigi Auriemma.

ORIGINAL ADVISORY:
http://aluigi.altervista.org/adv/bv2x-adv.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------