Exploit
exploit:house_deletion_exploit
Exploit that allowed a player to delete another player’s house by using a valid house dialog and another house’s identifier.
Exploit that allowed a player to delete another player’s house by using a valid house dialog and another house’s identifier.
“The conclusion was that no, the server doesn’t check if you’re the owner of this house”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | house ownership validation flaw | Derived | 8 |
| outgoing | AFFECTS | Ultima Online | Derived | 8 |
| incoming | USES | Manfred | Explicit | 8 |
| incoming | INVOLVES | Ultima Online house deletion fiasco | Derived | 8 |
house deletion exploit EXPLOITS house ownership validation flaw
The house-deletion exploit worked because the server did not properly verify that the sender owned the targeted house.
Derived Confidence 98% · Manfred EP 8 Details
“the server doesn’t check if you’re the owner of this house when you send the delete packet”
house deletion exploit AFFECTS Ultima Online
The house-deletion exploit affected houses and house ownership in Ultima Online.
Derived Confidence 97% · Manfred EP 8 Details
“my neighbor’s house just disappeared”
Manfred USES house deletion exploit
Manfred used the house-deletion exploit to delete other players’ houses.
Explicit Confidence 99% · Manfred EP 8 Details
“I started deleting players’ homes of rival guilds”
Ultima Online house deletion fiasco INVOLVES house deletion exploit
The Ultima Online house-deletion fiasco involved the exploit used to delete large numbers of houses.
Derived Confidence 99% · Jack Rhysider EP 8 Details
“created a new character. He ran around the game deleting every house he could find”