CVE-2008-2108

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against...

CVE-2008-2106

Call of Duty 4 CoD4 1.5 and earlier allows remote authenticated users to cause a denial of service crash via a type 7 stats packet, which triggers a memcpy with a negative value...

CVE-2008-2106

Summary: CVE-2008-2106 affects Call of Duty 4 (CoD4) v1.5 and earlier. The issue allows remote authenticated users to cause a denial of service (crash) by sending a type 7 stats packet that triggers a memcpy with a negative value. This is the concrete vulnerability described in the connected docu...

CVE-2008-2106: Improper Input Validation

Call of Duty 4 CoD4 1.5 and earlier allows remote authenticated users to cause a denial of service crash via a type 7 stats packet, which triggers a memcpy with a negative value...

游戏使命召唤畸形stats命令拒绝服务漏洞

BUGTRAQ ID: 29026 使命召唤（Call of Duty）是Infinity Ward开发的非常流行的第一人称扮演游戏。 使命召唤在处理畸形格式的请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 使命召唤4引入了一类被称为stats的无连接命令，玩家加入远程游戏后就会顺序发送0到6类型的上述命令。服务器还接收额外的7类型stats命令，如果客户端使用了这个7类型命令的话，远程服务器就会由于负数大小值的memcpy而崩溃。 成功利用这个漏洞要求攻击者知道受保护服务器的口令，此外如果服务器要求的话还需要拥有有效的cdkey。 Activision Call of...

Denial of Service in Call of Duty 4 1.5

Luigi Auriemma Application: Call of Duty 4: Modern Warfare http://www.callofduty.com Versions: = 1.5 Platforms: Windows tested and Linux Bug: Denial of Service Exploitation: remote, versus server in-game Date: 02 May 2008 Thanx to: Chronos for the additional tests Author: Luigi Auriemma e-mail:...

RHEL 4 / 5 : thunderbird (RHSA-2008:0224)

Updated thunderbird packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in th...

Debian: Security Advisory (DSA-1534-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1556-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 8 Update: kde-filesystem-4-14.fc8

This package provides some directories that are required/used by KDE...

[SECURITY] Fedora 8 Update: kdepimlibs-4.0.3-3.fc8

Personal Information Management PIM libraries for the K Desktop Environment 4...

[SECURITY] Fedora 7 Update: kdebase-runtime-4.0.3-10.fc7.1

Core runtime for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts...

[SECURITY] Fedora 7 Update: kdepimlibs-4.0.3-3.fc7

Personal Information Management PIM libraries for the K Desktop Environment 4...

[SECURITY] Fedora 7 Update: lighttpd-1.4.19-4.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

RHEL 4 : xpdf (RHSA-2008:0240)

Updated xpdf packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Kees Cook...

RHEL 4 : kdegraphics (RHSA-2008:0238)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0238 advisory. The kdegraphics packages contain applications for the K Desktop Environment, including kpdf, a PDF file viewer. Kees Cook discovered a flaw in the wa...

CentOS 4 : xpdf (CESA-2008:0240)

Updated xpdf packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Kees Cook...

RHEL 3 / 4 : openoffice.org (RHSA-2008:0176)

Updated openoffice.org 1.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...

Debian: Security Advisory (DSA-1550-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1543-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...