Slashdot Mirror

← Back to Stories (view on slashdot.org)

Multi-vendor Game Server (GameSpy) DDoS Attack

Posted by Hemos on from the how-many-games-do-you-have dept.

w4rl5ck writes "PivX has this security advisory about DDoS attacks using a single modem line and some game servers (i.e. Counter Strike, QuakeX, Battlefield 1942 - in short, those supporting GameSpy). Works via spoofed udp packages querying the server stats, and because udp is connectionless, the server simply answers - to the spoofed address, of course. Funny thing, isn't it? (originally found on heise.de)"

2 of 188 comments (clear)

  1. Re:Gotta love UDP by cscx · · Score: -1, Redundant

    Wow, you're so smart, aren't you? Well what you don't know I that I know for a fact that every f/w revision since 1.3.0 until (at least) 1.42.0 DID EXHIBIT this problem. This is for over a year of firmware releases!!! Linksys refused to fix the problem when notified about it by multiple people.

    But I'm sure you already knew that.

    Being a smartass != Security folks.

  2. DOS not DDOS by SirCrashALot · · Score: 1, Redundant

    A DDOS attack is a distributed denial of service attack, one where many servers all send packets to take down a network. As this article states, it is a dos attack. You hit one server at a time. If you send packets to multiple servers, then it can be a ddos, but not in the sense where there is very little disruption from the source of the attack.
    This attack can take down the "source server" as well as the destination.