CVE-1999-1230

Step 1: Packet Crafting: The attacker crafts a UDP packet. The packet's payload is irrelevant; the key is the source IP address. Step 2: Source IP Spoofing: The attacker spoofs the source IP address of the UDP packet to 127.0.0.1 (localhost). Step 3: Packet Delivery: The attacker sends the crafted packet to the target Quake 2 server. Step 4: Server Processing: The Quake 2 server receives the packet. Due to the spoofed source IP, the server attempts to connect to itself. Step 5: Recursive Connection Attempts: The server repeatedly attempts to connect to itself, consuming resources and creating a DoS condition.

The vulnerability stems from a lack of proper input validation and source address verification in the Quake 2 server's UDP packet handling. Specifically, the server doesn't adequately check the source IP address of incoming packets. When a packet with a spoofed source IP of 127.0.0.1 (localhost) is received, the server attempts to establish a connection to itself. This creates a recursive loop of connection attempts, rapidly consuming server resources such as CPU and network bandwidth, ultimately leading to a DoS condition. The root cause is a missing check or incorrect handling of the source IP address, allowing a malicious actor to trigger a resource exhaustion attack.