Hacking Punkbuster: Anti-cheat servers vulnerable to remote exploitation

guest · Oct 1, 2020

Anti-cheat servers for Battlefield, Medal of Honor vulnerable to remote exploitation
PunkBuster solution ended up punk’d by two reverse engineers
October 1, 2020
https://portswigger.net/daily-swig/...al-of-honor-vulnerable-to-remote-exploitation

Researchers have disclosed a remote code execution (RCE) flaw impacting Battlefield and Medal of Honor servers that harnesses PunkBuster anti-cheat software.
Path traversal
On September 25, Palo Alto Networks senior security researcher Daniel Prizmant and computer science student Mauricio Sandt disclosed that the firm’s software harbored a severe security issue.
The path traversal vulnerability could be exploited by attackers – or, perhaps, disgruntled cheaters – to hijack servers and perform RCE attacks.

The duo, both avid Battlefield gamers, said in a Medium blog post that after replaying Battlefield 4, they found close to 1,000 active PunkBuster-protected servers. This inspired them to begin a “cool side project to take a look at the internals of Punkbuster and fundamentally understand how it works”.
Click to expand...

After being made aware of the security hole, PunkBuster resolved the issue in server software version 1.905. The researchers have chosen not to release exploit code as some servers have not yet been updated.

“Server administrators running a PB Server version prior to version 1.905 for any game should disable PunkBuster on their game server(s),” Even Balance said.
Click to expand...

Log in or Sign up

Hacking Punkbuster: Anti-cheat servers vulnerable to remote exploitation

guest Guest

Log in or Sign up

Hacking Punkbuster: Anti-cheat servers vulnerable to remote exploitation

guest Guest

Useful Searches