281 matches found
pjblog upload vulnerability-vulnerability warning-the black bar safety net
First of all have pjblog the super administrator accounteven is to take their blog to the test Log in, post a new log, pass an asp horse, and the extension to get rid of that pjblog seemingly didn't do the file header check, remember address Then login the backend, the recovery database before...
Debian DSA-949-1 : crawl - insecure program execution
Steve Kemp from the Debian Security Audit project discovered a security related problem in crawl, another console based dungeon exploration game in the vein of nethack and rogue. The program executes commands insecurely when saving or loading games which can allow local attackers to gain group...
CVE-2006-0045
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...
CVE-2006-0045
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...
CVE-2006-0045
CVE-2006-0045 affects the crawl game prior to 4.0.0, where saving/loading can trigger insecure execution of programs, allowing local users to gain full privileges. Root cause: the program does not securely call external commands during save/load. Practical impact is local privilege escalation; no...
[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 949-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 949-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2006 http://www.debian.org/security/faq -...
CVE-2006-0045: Undefined Security Weakness
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...
DSA-949-1 crawl - insecure program execution
Bulletin has no description...
Debian DSA-432-1 : crawl - buffer overflow
Steve Kemp from the Debian Security Audit Project discovered a problem in crawl, another console based dungeon exploration game, in the vein of nethack and rogue. The program uses several environment variables as inputs but doesn't apply a size check before copying one of them into a fixed size...
CVE-2004-0103
crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow...
CVE-2004-0103
The CVE-2004-0103 issue affects the crawl game (Debian packaging context indicated by DSA-432). Vulnerable component: environment-variable handling leading to a missing size check when copying into a fixed-size buffer, enabling local privilege escalation. Affected: crawl before 4.0.0 beta23. Impa...
CVE-2004-0103
crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow...
CVE-2004-0103
crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow...
CVE-2004-0103: Undefined Security Weakness
crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow...
[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 432-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 432-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2004 http://www.debian.org/security/faq -...
DSA-432 crawl - buffer overflow
Bulletin has no description...
