Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2009-3591 Details

Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033	CVE	Patch
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033	CVE
http://secunia.com/advisories/36961	CVE	Vendor Advisory
http://www.securityfocus.com/archive/1/507012/100/0/threaded	CVE
http://www.securityfocus.com/bid/36606	CVE	Exploit
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033	[email protected]	Patch
http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033	[email protected]
http://secunia.com/advisories/36961	[email protected]	Vendor Advisory
http://www.securityfocus.com/archive/1/507012/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/36606	[email protected]	Exploit

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Product	Versions
ben webb dopewars	1.5.12
CPE cpe:2.3:a:ben_webb:dopewars:1.5.12:::::::* Remediation No remediation found in references.

6 change records found show changes

QUICK INFO