CVE-2003-0060

CVE-2003-0060 describes a format-string vulnerability in the MIT Kerberos V5 KDC logging routines prior to version 1.2.5. The issue allows remote attackers to trigger a denial of service (crash) and, potentially, to execute arbitrary code via format string specifiers in Kerberos principal names. ...

MIT Kerberos V5 KDC logging routines use unsafe format strings

Overview Early releases of the MIT Kerberos V5 KDC contain format string vulnerabilities that can be used by unauthenticated remote attackers to conduct denial of service attacks on KDC servers. Description Logging routines in some unspecified versions of the MIT Kerberos V5 Key Distribution Cent...

plpnfsd format string bug

Format string bug on syslog call...

StatsMe format string bug

Format string bug in smplayerstats...

Adminmod format string bug

Formatstring bug in multiple command...

[VSA0302] Half-Life Adminmod remote (root) hole

void.at Security Advisory VSA0302 Adminmod1 is a plugin for the "Half-Life Server", hosting the most popular online game today, "Counter-Strike", among others. Overview ======== Due to a format string bug in adminmod, it is possible for a remote attacker who knows the rcon-password to remotely...

[VSA0303] Half-Life StatsMe remote (root) hole

void.at Security Advisory VSA0303 Overview ======== "statsme"1 is a popular plugin for the Half-Life Dedicated Server hlds. hlds is not only the server for the most popular online game today, "Counter-Strike", but for many other games too. Two security bugs in statsme make it possible to execute...

Half Life clanmod format string bug

Formst string bug in cmlog command requires rcon access...

[VSA0304] Half-Life Client remote hole via Adminmod plugin

void.at Security Advisory VSA0304 Half-Life is the underlying game for the most popular online game today, "Counter-Strike", and others. Adminmod is a popular plugin to the half-life-server. Overview ======== Due to a format string in the Half-Life client, it is possible for an attacker who has...

[VSA0301] Half-Life Clanmod remote (root) hole

void.at Security Advisory VSA0301 Clanmod1 is a plugin for the "Half-Life Server", hosting the most popular online game today, "Counter-Strike", among others. Overview ======== Due to a format string bug in clanmod, it is possible for a remote attacker who knows the rcon-password to remotely...

Half-Life AdminMod 2.50 Plugin - Remote Format String

Half-Life AdminMod 2.50 Plugin - Remote Format String // source: https://www.securityfocus.com/bid/6580/info // A format string vulnerability has been discovered in the Half-Life AdminMod plugin. The problem occurs in commands which call the selfmessage function, which is used by other functions ...

Half-Life AdminMod 2.50 Plugin - Remote Format String

// source: https://www.securityfocus.com/bid/6580/info // A format string vulnerability has been discovered in the Half-Life AdminMod plugin. The problem occurs in commands which call the selfmessage function, which is used by other functions to write a message to the users console. The format...

Half-Life ClanMod 1.80/1.81 Plugin - Remote Format String

// source: https://www.securityfocus.com/bid/6577/info // A format string vulnerability has been discovered in the Half-Life ClanMod plugin. The problem occurs in the 'cmlog' command which is designed to write a message to the server log file. An 'rcon' authenticated user may be able to exploit...

Half-Life 1.1 Client - Server Message Format String

Half-Life 1.1 Client - Server Message Format String // source: https://www.securityfocus.com/bid/6582/info // It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does n...

Half-Life StatsMe 2.6.x Plugin - MakeStats Format String

// source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context o...

Half-Life Client Server Message Format String Vulnerability

...

Half-Life 1.1 Client - Server Message Format String

// source: https://www.securityfocus.com/bid/6582/info // It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input. This could result in denia...

[INetCop Security Advisory] Remote format string vulnerability in Tanne.

======================================== INetCop Security Advisory 2003-0x82-012 ======================================== Title: Remote format string vulnerability in Tanne. 0x01. Description About: tanne is a small, secure session-management solution for HTTP. It replaces common sessions with a...

Tanne formatstring bug

syslog format string bug...

TANne 0.6.17 - Session Manager SysLog Format String

// source: https://www.securityfocus.com/bid/6553/info TANne is a freely available, open source session management package. It is available for Unix and Linux operating systems. Due to programming error, it may be possible to exploit a format string vulnerability. A logging function in the TANne...