The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earli…

published 2004-12-31 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-1392

cvss: 5.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 3.8%; EPSS 3.8% chance of exploitation in 30 days, percentile 90%
public exploits: 1; Exploit-DB

The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation would block."

Patch / fix

links 2

Timeline

2004-12-13 First public exploit (EDB-683)
2004-12-31 Published

Exploit prediction

3.82% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-683 Lithtech Engine (new protocol) - Socket Unreacheable Denial of Service dos, 2004-12-13
aluigi.altervista.org http://aluigi.altervista.org/adv/lithsock-adv.txt referenced PoC, tagged "exploit" by a source, unverified
lists.grok.org.uk http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/bid/11902 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P

References

aluigi.altervista.org /adv/lithsock-adv.txt
exploit, patch
lists.grok.org.uk /pipermail/full-disclosure/2004-December/029932.html
mailing-list, exploit, patch
securityfocus.com /bid/11902
vdb-entry, exploit
secunia.com /advisories/13446/
third-party-advisory
exchange.xforce.ibmcloud.com /vulnerabilities/18456
vdb-entry
lists.grok.org.uk /pipermail/full-disclosure/2005-October/038095.html
mailing-list
secunia.com /advisories/17317
third-party-advisory
marc.info /?l=bugtraq&m=110297515500671&w=2
mailing-list

Sources

CVE List CVE-2004-1395
NVD CVE-2004-1395

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary