« Volver al listado

CVE-2004-0278

Estado: ModificadaMedia (5)—

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Ratbag — Dirt Track RacingRatbag — Dirt Track Racing AustraliaRatbag — Dirt Track Racing Sprint CarsRatbag — LeadfootRatbag — World OF Outlaws Sprint Cars

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0278",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-11-23T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=107655269820530&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/9644",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15188",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=107655269820530&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/9644",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15188",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data."
    },
    {
      "lang": "es",
      "value": "El motor de juegos Ratbag, usado en productos como Dirt Track Racing, Leadfoot, y World of Outlaws Spring Cars, permite a atacantes remotos causar una denegación de servicio (consumición de CPU) mediante un paquete TCP que especifica la longitud de los datos para leer y otro paquete TCP enviado a continuación que contiene menos datos de los especificados, lo que hace que Ratbag compruebe el socket repetidamente esperando más datos."
    }
  ],
  "lastModified": "2026-06-16T22:05:18.517",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ratbag:dirt_track_racing:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A32183BA-B42D-4AEA-A047-AA81447BC028"
            },
            {
              "criteria": "cpe:2.3:a:ratbag:dirt_track_racing:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43672CF5-63F0-481A-B790-C9511D97630E"
            },
            {
              "criteria": "cpe:2.3:a:ratbag:dirt_track_racing_australia:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77913F99-C04B-40C4-8620-915584A03B2D"
            },
            {
              "criteria": "cpe:2.3:a:ratbag:dirt_track_racing_sprint_cars:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CDAD983-2248-44C4-B2E7-C784D235B027"
            },
            {
              "criteria": "cpe:2.3:a:ratbag:leadfoot:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "678651DC-07B2-4F60-B411-9C6ED926C1A7"
            },
            {
              "criteria": "cpe:2.3:a:ratbag:world_of_outlaws_sprint_cars:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BE240FF-0A9E-444D-9A08-02DCDCC118B2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}