CVE-2004-1855 in Dark Age of Camelot
Summary
by MITRE
Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 01/21/2025
The vulnerability described in CVE-2004-1855 affects the massively multiplayer online role-playing game Dark Age of Camelot prior to version 1.68 live patch. This security flaw resides in the game's authentication and encryption mechanisms, specifically concerning how RSA public keys are handled during network communications. The absence of proper key signing creates a critical weakness in the game's security infrastructure that directly impacts the integrity of client-server communications.
The technical flaw manifests when the game client attempts to establish secure connections with game servers. Without proper RSA public key signing, malicious actors can intercept network traffic and present forged server certificates to unsuspecting players. This vulnerability operates at the transport layer security level where the game should be validating server authenticity through cryptographic signatures. The lack of signature verification means that any attacker capable of positioning themselves between the client and legitimate server can perform man-in-the-middle attacks without detection.
This vulnerability directly maps to CWE-327, which addresses the use of weak cryptographic algorithms and improper implementation of cryptographic functions. The absence of public key signature verification creates an attack surface that allows adversaries to impersonate legitimate game servers and potentially capture sensitive user information including login credentials, personal data, and in-game assets. The operational impact extends beyond simple information disclosure as attackers could manipulate game state, disrupt gameplay, or gain unauthorized access to player accounts.
The attack vector for this vulnerability is particularly concerning as it requires minimal technical expertise to exploit. An attacker needs only to set up a rogue server with a valid certificate that can masquerade as a legitimate game server. This type of attack falls under the ATT&CK technique T1071.004 for application layer protocol and T1566 for credential harvesting. The vulnerability affects all users of the affected game versions and creates a persistent threat that remains active until the patch is applied.
Mitigation strategies for this vulnerability include immediate installation of the 1.68 live patch which properly implements RSA public key signing. Network administrators should also implement additional monitoring for unusual traffic patterns that might indicate man-in-the-middle activity. The game developers should enforce certificate pinning mechanisms and implement more robust authentication protocols. Players should be educated about the importance of verifying server certificates and avoiding connections to suspicious or unverified game servers. Organizations using the game for business purposes should consider implementing network segmentation and traffic inspection tools to detect potential attacks. The vulnerability demonstrates the critical importance of cryptographic best practices and proper certificate management in online gaming environments where user data and virtual assets are at stake.