Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...

freeciv -- Denial of Service Vulnerabilities

Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS Denial of Service. An error in the "generichandleplayerattributechunk" function in common/packets.c can be exploited to crash the service via a specially crafted...

Freeciv: Denial of service

Background Freeciv is an open source turn-based multiplayer strategy game, similar to the famous Civilization series. Description Luigi Auriemma discovered that Freeciv could be tricked into the allocation of enormous chunks of memory when trying to uncompress malformed data packages, possibly...

GLSA-200603-11 : Freeciv: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200603-11 Freeciv: Denial of Service Luigi Auriemma discovered that Freeciv could be tricked into the allocation of enormous chunks of memory when trying to uncompress malformed data packages, possibly leading to an out of memory...

[SECURITY] [DSA 994-1] New freeciv packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 994-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 994-1] New freeciv packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 994-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

DSA-994-1 freeciv - denial of service

Bulletin has no description...

Mandrake Linux Security Advisory : freeciv (MDKSA-2006:053)

A Denial of Service vulnerability was discovered in the civserver component of the freeciv game on certain incoming packets. The updated packages have been patched to fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Design/Logic Flaw

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

DEBIAN-CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

CVE-2006-0047 affects Freeciv 2.0.x servers (before 2.0.8). The vulnerability is in packets.c where the handling of packet length can be exploited by remote attackers to crash the Freeciv server with crafted packets that use negative compressed size values. Multiple connected advisories (Gentoo G...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...

Out of memory crash in Freeciv 2.0.7

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.0.7 Platforms: Windows, nix, BSD, MacOS and more Bug: bad memory allocation Exploitation: remote, versus server Date: 06 Mar 2006 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Freeciv <= 2.0.7 (Jumbo Malloc) Denial of Service Crash

Exploit for unknown platform in category dos / poc ======================================================= Freeciv include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...

freeciv -- Packet Parsing Denial of Service Vulnerability

Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error within the handling of the packet length in "common/packets.c". This can be exploited to crash the...

Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

Freeciv 2.0.7 - Jumbo Malloc Crash Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...