Security fix for the ALT Linux 8 package chrony version 1.24-alt1

Feb. 8, 2010 Victor Forsyuk 1.24-alt1 - 1.24. Contains security fixes for CVE-2010-0292, CVE-2010-0293, CVE-2010-0294...

PT-2010-1023 · Debian · Lintian

Name of the Vulnerable Software and Affected Versions: Lintian versions 1.23.x through 1.23.28 Lintian versions 1.24.x through 1.24.2.1 Lintian versions 2.x before 2.3.2 Description: Multiple directory traversal vulnerabilities allow remote attackers to overwrite arbitrary files or obtain sensiti...

PT-2009-3742 · Mozilla +1 · Firefox +1

Name of the Vulnerable Software and Affected Versions: Pango versions prior to 1.24 Description: The issue is related to an integer overflow in the pango glyph string set size function, which can be triggered by a long glyph string. This can cause a denial of service, resulting in an application...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...

CVE-2007-4935

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...

CVE-2007-4934

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 programfiles/livedraft/livedraft.php or 2 programfiles/livedraft/admin.php...

CVE-2007-4934

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 programfiles/livedraft/livedraft.php or 2 programfiles/livedraft/admin.php...

CVE-2007-4935

PHPFFL 1.24 contains multiple remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by supplying a URL to the PHPFFL_FILE_ROOT parameter on several pages (admin.php, custom_pages.php, draft.php, etc.). The vulnerabilities cover both general pages and specific ...

CVE-2007-4934

CVE-2007-4934 and CVE-2007-4935 describe multiple PHP remote file inclusion (RFI) vulnerabilities in phpFFL 1.24. The issue allows an attacker to supply a URL via the PHPFFL_FILE_ROOT parameter to certain PHP files and cause arbitrary PHP code execution. For CVE-2007-4934, vectors include program...

CVE-2007-4935

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...

phpFFL 1.24 PHPFFL_FILE_ROOT Remote File Inclusion Vulnerabilities

No description provided by source. Title : phpFFL 1.24 Remote File Inclusion Vulnerability Title : phpFFL 1.24 Remote File Inclusion Vulnerability Author : Dj7xpl Contact : [email protected] Dawnload : http://sourceforge.net/project/showfiles.php?groupid=137531 Gr33tZ : Y! Underground Group , IrR57 ...

Code injection

The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service daemon crash via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error...

CVE-2007-4534

Buffer overflow in the VThinker::BroadcastPrintf function in pthinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via 1 a long string in a chat message and possibly 2 a long name field...

Buffer overflow

Buffer overflow in the VThinker::BroadcastPrintf function in pthinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via 1 a long string in a chat message and possibly 2 a long name field...

CVE-2007-4534

CVE-2007-4534 affects Vavoom 1.24 and earlier, where a buffer overflow in VThinker::BroadcastPrintf (p_thinker.cpp) allows remote code execution via overly long strings in chat messages or a long name field. The vulnerability is documented in the NVD entry for CVE-2007-4534 (base score 7.5, HIGH,...

CVE-2007-4534

Buffer overflow in the VThinker::BroadcastPrintf function in pthinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via 1 a long string in a chat message and possibly 2 a long name field...

CVE-2007-4533

The CVE-2007-4533 issue affects Vavoom 1.24 and earlier, specifically the Say command in sv_main.cpp. A format string vulnerability could allow remote attackers to execute arbitrary code via format string specifiers in a chat message, tied to a call to BroadcastPrintf. This vulnerability is confi...

CVE-2007-4535

The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service daemon crash via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error...

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...

Vavoom 1.24 - sv_main.cpp Say Command Remote Format String

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...