CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

Gamespy cd-key validation system: "Cd-key in use" DoS versus many games

Luigi Auriemma Application: Gamespy cd-key validation system http://www.gamespy.net Games: The amount of games that use this system is really huge, a small list maintained by me is available here: http://aluigi.altervista.org/papers/gshlist.txt An official list of games that use the Gamespy stuff...

CVE-2005-1504: Undefined Security Weakness

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. Affected: X-CD-Roast 0.98 alpha10–alpha14. Root cause: symlink manipulation enabling file overwrite. Impact: as described, enables partial impact to confidentiali...

CVE-2004-2004

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-2004

CVE-2004-2004 affects the SUSE LINUX 9.1 Personal edition Live CD, where the root account is configured without a password. This allows remote attackers to gain root privileges via SSH. The vulnerability is described with a CVSS base score of 10.0 (HIGH) and a network attack vector with no authen...

CVE-2003-1155: Undefined Security Weakness

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-2004: Undefined Security Weakness

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

CVE-2005-0330

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

CVE-2002-1354: Undefined Security Weakness

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

Moderate: Red Hat Security Advisory: grip security update

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

CVE-2004-1643: Undefined Security Weakness

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2005-0330

CVE-2005-0330 affects Painkiller 1.35 and earlier (and possibly other versions before 1.61). A buffer overflow in processing the cd-key hash allows remote authenticated users to trigger a denial of service and, possibly, execute arbitrary code. Impact and exploitation details are based on the pro...

CVE-2005-0278: Undefined Security Weakness

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

CVE-2005-0330: Undefined Security Weakness

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application durin...