CVEvulnerability
CVE-2003-1433
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-287
Description
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
Affected configurations
• epic games unreal engine 226f
• epic games unreal engine 433
• epic games unreal engine 436
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
Referenced by CWE · observed example (1)
- CWE-837 Improper Enforcement of a Single, Unique Action weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html archives.neohapsis.com
- http://www.pivx.com/luigi/adv/ueng-adv.txt www.pivx.com
- http://www.securityfocus.com/bid/6771 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11304 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html archives.neohapsis.com
- http://www.pivx.com/luigi/adv/ueng-adv.txt www.pivx.com
- http://www.securityfocus.com/bid/6771 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11304 exchange.xforce.ibmcloud.com