Vulnerability Development mailing list archives

Unreal Webserver

From: adam.boileau () STAFF IHUG CO NZ (Adam Boileau)
Date: Mon, 14 Feb 2000 17:05:26 +1300


As part of the Linux UnrealTournament server, there is a remote www-based
admin interface, which runs as part of the server binary. There is no
source, and quick search of the web and unreal.epicgames.com reveals
nothing.

Does anyone know of any reviews of the UnrealEngine UWeb server wrt
security, or any generic 'sploits/bugs/etc that would be worth banging on?

Our rig is running on port 1099 (I'm not sure if this is a default or
just a random port chosen by the server admin) and returns the following
version string:

Server: UnrealEngine UWeb Web Server Build 402

Thanks folks.
Adam

---
Adam Boileau
Systems Programmer/Security Guy
Ihug - www.ihug.co.nz

Current thread:

WINS attack? Bryce Walter (Feb 10)
- Re: WINS attack? Seth R Arnold (Feb 10)
- Re: WINS attack? Blue Boar (Feb 10)
- Re: WINS attack? John Hall (Feb 11)
- IE Java Nicolas Rachinsky (Feb 12)
- Unreal Webserver Adam Boileau (Feb 13)
  - Re: Unreal Webserver Arturo (Feb 14)
  - vulnerability database Ben Valenti (Feb 16)
    - Re: vulnerability database H D Moore (Feb 17)
    - Re: vulnerability database Yiorgos Adamopoulos (Feb 17)
    - Re: vulnerability database Iván Arce (Feb 17)
    - Re: vulnerability database Dragos Ruiu (Feb 17)
    - Re: vulnerability database Jay D. Dyson (Feb 17)
    - Eudora incoming email affects behavior Thomas Kluegel (Feb 17)
    - Re: Eudora incoming email affects behavior Jay D. Dyson (Feb 18)
    - Re: Eudora incoming email affects behavior Bluefish (Feb 29)