CVE-2004-1500: Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated use

Routine

LOW 2.1DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2004-1500 is a low-severity flaw (CVSS 2.1) affecting purge jihad, alien versus predator, blood. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Why this priority

Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	2.1 (Low)
EPSS exploit chance	1.9% (top 21%)
CISA exploited list	No
Published	2004-12-31
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: freeform interactive · monolith productions

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2004-12-31 05:00 UTCPublished CVE record published
2026-06-16 22:07 UTCUpdated Record last modified

freeform interactive purge jihad DOWNGRADE

Affected: 2.2.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.2.1

1. Check installed version

apt-cache policy purge-jihad || rpm -q purge-jihad || purge-jihad --version

2. No fixed release: DOWNGRADE to a release before 2.2.1 (Debian / Ubuntu)

apt-cache madison purge-jihad sudo apt install purge-jihad=<VERSION_BEFORE_2.2.1> sudo apt-mark hold purge-jihad

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list purge-jihad sudo dnf downgrade purge-jihad-<VERSION_BEFORE_2.2.1> sudo dnf versionlock add purge-jihad

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

monolith productions alien versus predator DOWNGRADE

Affected: 2.1.0.9.6

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.1.0.9.6

1. Check installed version

apt-cache policy alien-versus-predator || rpm -q alien-versus-predator || alien-versus-predator --version

2. No fixed release: DOWNGRADE to a release before 2.1.0.9.6 (Debian / Ubuntu)

apt-cache madison alien-versus-predator sudo apt install alien-versus-predator=<VERSION_BEFORE_2.1.0.9.6> sudo apt-mark hold alien-versus-predator

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list alien-versus-predator sudo dnf downgrade alien-versus-predator-<VERSION_BEFORE_2.1.0.9.6> sudo dnf versionlock add alien-versus-predator

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

monolith productions blood DOWNGRADE

Affected: 2.2.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.2.1

1. Check installed version

apt-cache policy blood || rpm -q blood || blood --version

2. No fixed release: DOWNGRADE to a release before 2.2.1 (Debian / Ubuntu)

apt-cache madison blood sudo apt install blood=<VERSION_BEFORE_2.2.1> sudo apt-mark hold blood

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list blood sudo dnf downgrade blood-<VERSION_BEFORE_2.2.1> sudo dnf versionlock add blood

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

monolith productions contract jack DOWNGRADE

Affected: 1.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.1

1. Check installed version

apt-cache policy contract-jack || rpm -q contract-jack || contract-jack --version

2. No fixed release: DOWNGRADE to a release before 1.1 (Debian / Ubuntu)

apt-cache madison contract-jack sudo apt install contract-jack=<VERSION_BEFORE_1.1> sudo apt-mark hold contract-jack

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list contract-jack sudo dnf downgrade contract-jack-<VERSION_BEFORE_1.1> sudo dnf versionlock add contract-jack

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

monolith productions global operations DOWNGRADE

Affected: 2.0 · 2.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.0

1. Check installed version

apt-cache policy global-operations || rpm -q global-operations || global-operations --version

2. No fixed release: DOWNGRADE to a release before 2.0 (Debian / Ubuntu)

apt-cache madison global-operations sudo apt install global-operations=<VERSION_BEFORE_2.0> sudo apt-mark hold global-operations

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list global-operations sudo dnf downgrade global-operations-<VERSION_BEFORE_2.0> sudo dnf versionlock add global-operations

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

monolith productions kiss psycho circus DOWNGRADE

Affected: 1.13

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.13

1. Check installed version

apt-cache policy kiss-psycho-circus || rpm -q kiss-psycho-circus || kiss-psycho-circus --version

2. No fixed release: DOWNGRADE to a release before 1.13 (Debian / Ubuntu)

apt-cache madison kiss-psycho-circus sudo apt install kiss-psycho-circus=<VERSION_BEFORE_1.13> sudo apt-mark hold kiss-psycho-circus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list kiss-psycho-circus sudo dnf downgrade kiss-psycho-circus-<VERSION_BEFORE_1.13> sudo dnf versionlock add kiss-psycho-circus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2004-1500?

purge jihad: downgrade or apply the listed mitigation; alien versus predator: downgrade or apply the listed mitigation; blood: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2004-1500 being exploited?

CVE-2004-1500 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2004-1500 affect?

CVE-2004-1500 affects purge jihad, alien versus predator, blood. Severity is low (CVSS 2.1). Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

How urgent is CVE-2004-1500?

Priority 32/100. Public exploit reference

Related CVEs

CVE-2004-0290 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an i

References

← Back to latest CVEs