Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30

Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 ------------------------------------------------------------- October 21st, 2009 ======= Summary ======= Name: Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 Release Date: October 21st, 2009 Discoverer: Jason Geffner...

PABox非授权重设用户口令漏洞

BUGTRAQ: 8067 paBox由于用户提交的输入缺少充分过滤，远程攻击者可以利用这个漏洞重设管理员的用户名和密码。 重设管理员用户名和密码就可以未授权控制应用程序。 paBox 1.6 厂商补丁： PHP Arena --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.phparena.net/pabox.php...

Unfixed XSS vulnerability at www.naruto-arena.com

Security researcher Uber0n, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.naruto-arena.com, which at the time of submission ranked 7595 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is...

DEBIAN-CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

DEBIAN-CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

Format string

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4755

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...

CVE-2007-4755

CVE-2007-4755 affects Alien Arena 2007 (version 6.10 and earlier). The issue allows remote attackers to cause a denial of service (client disconnect) by sending a forged client_connect command from the server to a client. The note indicates client IP addresses may be exposed via product-specific ...

CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

CVE-2007-4754

Alien Arena 2007 (v6.10 and earlier) is affected by a format-string vulnerability in the safe_bprintf function (acesrc/acebot_cmds.c) that allows remote attackers to trigger a denial of service (daemon crash) via format specifiers in a nickname. This CVE (CVE-2007-4754) is detailed across multipl...

CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

Format string and clients disconnection in Alien Arena 2007 6.10

Luigi Auriemma Application: Alien Arena 2007 http://red.planetarena.org Versions: = 6.10 and current SVN Platforms: Windows and Linux Bugs: A in-game format string in safebprintf B clients disconnection through spoofed clientconnect Exploitation: A remote versus server B remote versus clients Dat...

Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities

Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/25559/info Alien Arena 2007 is prone to multiple remote vulnerabilities, including a denial-of-service vulnerability and a format-string vulnerability. Successfully exploiting these issues will allow...

Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/25559/info Alien Arena 2007 is prone to multiple remote vulnerabilities, including a denial-of-service vulnerability and a format-string vulnerability. Successfully exploiting these issues will allow an attacker to execute arbitrary code within the contex...

XSS IN paFileDB 3.1

XSS IN paFileDB 3.1 BY b0rizQ ------------------- ZARLOULE04 at HOTMAIL dot FR ------------------------------------------------- FILE : pafiledb.php Dork : PHP Arena http://traget/pafiledb.php?action=category&id=1"scriptalertdocument.cookie;/script ------------------------------------------------...