989 matches found
Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)
Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...
PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)
PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...
PunkBuster < 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)
Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...
CVE-2006-2082: Undefined Security Weakness
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...
CVE-2006-2082
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...
CVE-2006-2236: Undefined Security Weakness
Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...
Sql injection
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-2209
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-2209
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-2209
PHP Arena paCheckBook 1.1 is affected by multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to execute arbitrary SQL commands via the transtype parameter in an add action or the entry parameter in an edit action. The description notes that provenance is from th...
CVE-2006-2209: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
Format string
Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...
Code injection
The Comsprintf function in qshared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers possibly authenticated to cause a denial of service application crash via a long skin, weapon, or model name...
CVE-2006-1146
Stack-based buffer overflow in the CmdSayf function in gcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code by sending a long message to the server...
CVE-2006-1145
Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...
CVE-2006-1145
The CVE-2006-1145 entry concerns a format string vulnerability in the safe_cprintf function of acebot_cmds.c from Alien Arena 2006 Gold Edition 5.00. The flaw could allow remote attackers (potentially authenticated) to execute arbitrary code when the server sends crafted messages to clients; exac...
CVE-2006-1146
The provided details describe a stack-based buffer overflow in the Cmd_Say_f function (g_cmds.c) affecting Alien Arena 2006 Gold Edition 5.00. An attacker could remotely trigger this by sending a long message to the server, potentially allowing arbitrary code execution. The vulnerability is class...
CVE-2006-1147
CVE-2006-1147 affects Alien Arena 2006 Gold Edition 5.00, where the function Com_sprintf in q_shared.c fails to properly NULL-terminate certain long strings. This can allow remote attackers (possibly authenticated) to trigger a denial of service (application crash) by supplying long values for sk...
CVE-2006-1145
Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...
CVE-2006-1146
Stack-based buffer overflow in the CmdSayf function in gcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code by sending a long message to the server...