[bf1942] DoS vulnerability in game servers (including BF1942)

[Kirk]

Gee...there's a freaking newsflash.

Basically he's telling you that if you query your server over and over
and over again you will flood it??  And because BF1942 gives you ALL the
information on a query everyone should lock their doors??  Wow....this
guy is brilliant.





-----Original Message-----
From: g8 at the.whole.net [mailto:g8 at the.whole.net] 
Sent: Friday, January 17, 2003 2:51 PM
To: bf1942 at icculus.org
Subject: [bf1942] DoS vulnerability in game servers (including BF1942)

http://www.pivx.com/press_releases/mk_mk001.html?tag=fd_top%3Cbr%20/%3E

"As a basic rule of thumb, if it supports gamespy, it will likely be
vulnerable."

I assume some of you have seen this.  Of course BF is included in the
bunch.  The reasearh into this exploit was done using the bf1942 server.
Don't know if anything can be done to prevent it at this point but now
it's official.

-g8