Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699

Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...

simple-traverse.txt

Luigi Auriemma Application: Simple HTTPD http://shttpd.sourceforge.net Versions: = 1.38 Platforms: Windows, nix, QNX, RTEMS only Windows seems vulnerable Bugs: A directory traversal B scripts and CGI viewing/downloading %20 char found by Shay priel in Jun 2007 Exploitation: remote Date: 07 Dec 20...

Format string in The Dawn of Time 1.69s beta4

Luigi Auriemma Application: The Dawn of Time http://www.dawnoftime.org Versions: = 1.69s beta4 and 1.69r too Platforms: nix and Windows Bug: format string in web server authorization Exploitation: remote Date: 05 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9

Luigi Auriemma Application: FSD http://www.mcdu.com/en/download.php Versions: = "V2.052 d9" original FSD and "V3.000 d9" FSFDT FSD Platforms: Windows and nix Bugs: A buffer-overflow in exechelp B buffer-overflow in execmulticast Exploitation: remote Date: 01 Oct 2007 Author: Luigi Auriemma e-mail...

Adobe Macromedia Flash Player code execution

nix platforms code execution...

Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit

No description provided by source. Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Limited format string in Netrek 2.12.0

Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Netrek 2.12.0 - pmessage2() Remote Limited Format String

Netrek 2.12.0 - pmessage2 Remote Limited Format String Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web:...

Backup implementation

Backup implementation I. Intro II. Tools III. Strategy We study the tools. System utilities for copying files. In the simplest case, to create a replica of the file structure, you can, of course, use the copy command on Windows and cp or rcp on nix. However, there are many questions that these...

Multiple buffer-overflows in libmusicbrainz 2.1.2

Luigi Auriemma Application: libmusicbrainz http://musicbrainz.org/doc/libmusicbrainz Versions: = 2.1.2 and = SVN 8406 current SVN Platforms: Windows, nix, BSD, Mac and others Bugs: A buffer-overflow in MBHttp::Download B various buffer-overflows in rdfparse.c Exploitation: remote Date: 13 Aug 200...

Festalon Heap Corruption

Luigi Auriemma Application: Festalon http://projects.raphnet.net/festalon Versions: = 0.5.5 and = 0.5.0 Platforms: Windows, nix, BSD, Winamp and XMMS plugin Bug: heap corruption in FESTAHESLoad Exploitation: local Date: 06 Aug 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.o...

Multiple vulnerabilities in UFO2000 svn 1057

Luigi Auriemma Application: UFO2000 http://ufo2000.sourceforge.net Versions: = SVN 1057 Platforms: Windows, nix, BSD, Mac and more Bugs: A buffer-overflow in recvaddunit B invalid memory access in decodestringmap C possible code execution through arrays D SQL injection E mapdata global buffer...

Format string bug in Sparklet 0.9.4try3

Luigi Auriemma Application: Sparklet http://sparklet.sourceforge.net Versions: = 0.9.4try3 Platforms: Windows, nix, BSD and more Bug: format string in client's display Exploitation: remote, versus clients Date: 06 Jul 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006)

Luigi Auriemma Application: AdPlug http://adplug.sourceforge.net Versions: = 2.0 and CVS = 04 Jul 2006 Platforms: Windows, DOS, nix, BSD and more Bugs: A heap overflow in the unpacking of CFF files B heap overflow in the unpacking of MTK files C heap overflow in the unpacking of DMO files D...

[Full-disclosure] Buffer-overflow and NULL pointer crash in Genecys 0.2

Luigi Auriemma Application: Genecys http://www.genecys.org Versions: = 0.2 and current CVS Platforms: nix and BSD Bugs: A tellplayersurrchanges buffer-overflow B parsecommand NULL pointer crash Exploitation: remote, versus server Date: 12 May 2006 Author: Luigi Auriemma e-mail: [email protected]...

Multiple vulnerabilities in Cube engine 2005_08_29

Luigi Auriemma Application: Cube engine http://www.cubeengine.com Versions: = 20050829 Platforms: Windows, nix, BSD and MacOS Bugs: A sgetstr buffer-overflow B invalid memory access C clients crash through invalid map Exploitation: remote, versus both server and clients Date: 06 Mar 2006 Author:...

ePSXe 1.6.0 - nogui() Local Privilege Escalation

ePSXe 1.6.0 - nogui Local Privilege Escalation / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack point...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

WebAPP 0.9.9.2.1 - Remote Command Execution 1 !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a...

Просмотр файлов в Search Engine & Directory Powered by Turbo Seek от FocalMedia.Net

Здравствуйте, 3APA3A. нашел новую узвимость. Просмотр файлов в Search Engine & Directory Powered by Turbo Seek от FocalMedia.Net Software / Application - Search Engine & Directory Powered by Turbo Seek Problem-Type - удаленная Vulnerability - возможность чтения файлов. Vendor - FocalMedia.Net...

[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...