Send News. Want a reply? Read this. More in the FAQ.   News Forum - All Forums - Mobile - PDA - RSS Headlines  RSS Headlines   Twitter  Twitter
Customize
User Settings
Styles:
LAN Parties
Upcoming one-time events:

Regularly scheduled events

Unreal Engine Exploit & Patch Plans

A recently posted BugTraq listing (thanks 3DGPU) outlines a vulnerability in Epic's Unreal engine that's susceptible to DoS, DDoS and bounce attacks with spoofed UDP packets. The report outlines the problem, which affects dozens of games from Unreal through UT2003, and describes how the author of the report held off on publicizing this for almost three months to give time for Epic to devise a fix. I contacted Epic's Mark Rein to ask about this and he was very frank about how this had indeed been brought to their attention, but had unfortunately fallen through the cracks. He sent along a list of changes for the next planned UT2003 patch which will now address these vulnerabilities, and says it's likely that a small patch will be issued to address these in the original version of Unreal Tournament as well. As for other games using the Unreal engine, he says that fixes like this are always made available to licensees, who will then be able to issue patches of their own should they so choose. Here is Mark's no-holds-barred assessment of why this went unaddressed after being brought to their attention:

I won't sugar coat this. We f***ed up on this. Yes this is real and yes this was brought to our attention and yes we should have fixed it by now. We are working on fixing this now and we will have this fixed in an upcoming patch before too long.

View
39. Re: No subject Feb 6, 2003, 19:03 Xombie
 
Anon = troll  
Xombie x0mbie x0mb|e Xombie
Previous Post Next Post Reply Quote Edit Delete Report
 
    Date Subject Author
  1. Feb 6, 12:00 No subject Jobz
  2. Feb 6, 12:02 Thanks for that, at least. Blackhawk
  3. Feb 6, 12:18  Re: Thanks for that, at least. Quboid
  4. Feb 6, 13:03   Re: Thanks for that, at least. quazz
  5. Feb 6, 13:28    Re: Thanks for that, at least. XEON
  9. Feb 6, 14:15    Re: Thanks for that, at least.  Blue 
  10. Feb 6, 14:21     Re: Thanks for that, at least. Rolphus
  28. Feb 6, 16:44      Re: Thanks for that, at least. Anvil
  11. Feb 6, 14:53  Re: Thanks for that, at least. Bronco
  12. Feb 6, 14:57   Re: Thanks for that, at least. fredrickson
  13. Feb 6, 15:15    Re: Thanks for that, at least. WAH
  14. Feb 6, 15:18    Re: Thanks for that, at least. Bronco
  15. Feb 6, 15:20    Re: Thanks for that, at least. DrEvil
  18. Feb 6, 15:51     Re: Thanks for that, at least. EvilGoof
  19. Feb 6, 16:15      Re: Thanks for that, at least. DrEvil
  6. Feb 6, 13:38 Shut Out? Schnapple
  7. Feb 6, 13:43  Re: Shut Out? XEON
  8. Feb 6, 13:53 oh.. vermin
  16. Feb 6, 15:25 eh... Hyatus
  17. Feb 6, 15:26  Re: eh... Schnapple
  20. Feb 6, 16:16  Re: eh...  Blue 
  21. Feb 6, 16:24   Re: eh... EvilGoof
  22. Feb 6, 16:26   Re: eh... Xombie
  23. Feb 6, 16:28    Re: eh... Schnapple
  24. Feb 6, 16:32     VOTE the_culture
  25. Feb 6, 16:33     Re: eh... Mechanik
  26. Feb 6, 16:38     Re: eh... Bronco
  27. Feb 6, 16:43      Re: eh... EvilGoof_Trollboy
  58. Feb 8, 18:11      Re: eh... -SI-Optimus
  29. Feb 6, 16:47     Re: eh... Anvil
  31. Feb 6, 16:53      Re: eh... MindTrigger
  30. Feb 6, 16:51     Re: eh... MindTrigger
  32. Feb 6, 16:57 No subject NoGodForMe
  33. Feb 6, 17:36  Re: No subject Jobz
  34. Feb 6, 17:44   Nice. nUttsAck
  35. Feb 6, 17:48   Re: No subject Wowbagger_TIP
  36. Feb 6, 17:51    Re: No subject  Blue 
  37. Feb 6, 18:04     Re: No subject aguita
  40. Feb 6, 19:18     Re: No subject fredrickson
>> 39. Feb 6, 19:03   Re: No subject Xombie
  42. Feb 6, 21:07    Re: No subject EvilGoof
  52. Feb 7, 15:58   Re: No subject DrEvil
  53. Feb 7, 16:37    Re: No subject MindTrigger
  56. Feb 8, 03:31    Re: No subject hebrew_national
  57. Feb 8, 12:12     Respect! G
  54. Feb 7, 22:05   To those who object... Roshambo
  38. Feb 6, 18:04 No subject kyleb
  41. Feb 6, 20:56 Lying Omroth
  43. Feb 6, 22:05  Re: Lying Quakey
  44. Feb 7, 00:15 ROFL F1
  45. Feb 7, 00:25  Re: ROFL TerroX
  46. Feb 7, 03:44   Re: ROFL 45 F1
  50. Feb 7, 12:15    Re: ROFL 45 CyberNutz
  51. Feb 7, 14:30     Geez... aguita
  47. Feb 7, 05:12 At least they're honest Creston
  48. Feb 7, 05:25  Re: At least they're honest Ray Marden
  49. Feb 7, 07:11  Re: At least they're honest Anvil
  55. Feb 7, 23:00   Re: At least they're honest Creston
  59. Feb 9, 16:38 No subject teh mane mahn
  60. Feb 9, 19:24  I just dont get it. Alak
  61. Feb 9, 22:54   Re: I just dont get it. pancreas
  62. Feb 10, 01:05    Re: I just dont get it. DrEvil
  63. Feb 10, 23:00     Re: I just dont get it. pancreas
  64. Feb 11, 13:06   Re: I just dont get it. MindTrigger
  65. Feb 11, 15:34    Re: I just dont get it. vajbern
  66. Feb 11, 17:32     Re: I just dont get it. MindTrigger
  67. Feb 11, 23:48      Re: I just dont get it. pancreas
  68. Feb 12, 05:05 patch Ouch
  69. Feb 12, 11:13 Putting this discussion back on track [DFA]Ozymandias
  70. Feb 12, 12:43  Re: Putting this discussion back on track MindTrigger


footer

Blue's News logo