Quake 3 Engine Client CS_ITEMS Remote Overflow Exploit (Win32)

Exploit for unknown platform in category dos / poc ============================================================== Quake 3 Engine Client CSITEMS Remote Overflow Exploit Win32 ============================================================== / Quake 3 Engine Client CSITEMS Remote Stack Overflow Exploi...

CVE-2006-2587

Buffer overflow in the WebTool HTTP server component in 1 PunkBuster before 1.229, as used by multiple products including 2 America's Army 1.228 and earlier, 3 Battlefield 1942 1.158 and earlier, 4 Battlefield 2 1.184 and earlier, 5 Battlefield Vietnam 1.150 and earlier, 6 Call of Duty 1.173 and...

Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)

Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...

PunkBuster < 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...

CVE-2006-2209

Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2209

Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2209

PHP Arena paCheckBook 1.1 is affected by multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to execute arbitrary SQL commands via the transtype parameter in an add action or the entry parameter in an edit action. The description notes that provenance is from th...

Format string

Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...

Code injection

The Comsprintf function in qshared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers possibly authenticated to cause a denial of service application crash via a long skin, weapon, or model name...

CVE-2006-1145

Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...

CVE-2006-1146

Stack-based buffer overflow in the CmdSayf function in gcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code by sending a long message to the server...

CVE-2006-1145

The CVE-2006-1145 entry concerns a format string vulnerability in the safe_cprintf function of acebot_cmds.c from Alien Arena 2006 Gold Edition 5.00. The flaw could allow remote attackers (potentially authenticated) to execute arbitrary code when the server sends crafted messages to clients; exac...

CVE-2006-1146

The provided details describe a stack-based buffer overflow in the Cmd_Say_f function (g_cmds.c) affecting Alien Arena 2006 Gold Edition 5.00. An attacker could remotely trigger this by sending a long message to the server, potentially allowing arbitrary code execution. The vulnerability is class...

CVE-2006-1147

CVE-2006-1147 affects Alien Arena 2006 Gold Edition 5.00, where the function Com_sprintf in q_shared.c fails to properly NULL-terminate certain long strings. This can allow remote attackers (possibly authenticated) to trigger a denial of service (application crash) by supplying long values for sk...

CVE-2006-1147

The Comsprintf function in qshared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers possibly authenticated to cause a denial of service application crash via a long skin, weapon, or model name...

CVE-2006-1145

Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...

CVE-2006-1146

Stack-based buffer overflow in the CmdSayf function in gcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code by sending a long message to the server...

[Full-disclosure] Multiple vulnerabilities in Alien Arena 2006 GE 5.00

Luigi Auriemma Application: Alien Arena 2006 Gold Edition http://red.planetarena.org Versions: = 5.00 Platforms: Windows and Linux Bugs: A safecprintf server format string B CmdSayf server buffer-overflow C Comsprintf crash Exploitation: A remote, versus server in-game B remote, versus server...