CVE-2018-11329

Published: May 22, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.

Affected (1)

Products: Ethercartel: Ether Cartel

Ethercartel

1 product

Ether Cartel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ethercartel Ether Cartel	Version 2018-05-18

References (2)

https://peckshield.com/2018/05/21/ceoAnyone/

Source: cve@mitre.org

Technical DescriptionThird Party Advisory

https://peckshield.com/2018/05/21/ceoAnyone/

Source: af854a3a-2127-422b-91ae-364da2661108

Technical DescriptionThird Party Advisory

Timeline

No history available yet.