Endless loop in Halo 1.06

Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.06 and Custom Edition 1.00 Platforms: Windows Bug: endless loop Exploitation: remote, versus server Date: 24 May 2005 Author: Luigi Auriemma e-mail: [email protected] web:...

Multiple vulnerabilities in Yager 5.24

Luigi Auriemma Application: Yager http://www.yager-game.de Versions: = 5.24 Platforms: Windows Bugs: A nickname buffer-overflow B data block buffer-overflow C freeze caused by incomplete data block D various crashes caused by corrupted data Exploitation: remote, versus server and clients Date: 14...

CVE-2004-1472: Undefined Security Weakness

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...

CVE-2004-1216

The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service server freeze via a long 1 nickname or 2 model type, which generates dialog boxes on the server that must be manually handled before the server continues the game...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...

Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability

Security Advisory Advisory: ADLAB-04005Microsoft Windows Kernel ANI File Parsing Crash and Dos Vulnerability Class: Design Error DATE:12/20/2004 Remote: Yes Vulnerable: Windows NT Windows 2000 SP0 Windows 2000 SP1 Windows 2000 SP2 Windows 2000 SP3 Windows 2000 SP4 Windows XP SP0 Windows XP SP1...

CVE-2004-1216

The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service server freeze via a long 1 nickname or 2 model type, which generates dialog boxes on the server that must be manually handled before the server continues the game...

CVE-2004-1216: Undefined Security Weakness

The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service server freeze via a long 1 nickname or 2 model type, which generates dialog boxes on the server that must be manually handled before the server continues the game...

Multiple vulnerabilities in Kreed 1.05

Luigi Auriemma Application: Kreed http://www.kreed3d.com Versions: = 1.05 Platforms: Windows Bugs: A in-game format string B forced exit caused by "message too long" C server temporary freezed by script errors Exploitation: remote, versus server Date: 02 December 2004 Author: Luigi Auriemma e-mai...

EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service

Kerio Personal Firewall Multiple IP Options Denial of Service Release Date: November 9, 2004 Date Reported: October 30, 2004 Severity: High Remote Denial of Service Vendor: Kerio Systems Affected: Kerio Personal Firewall 4.1.1 and prior Overview: eEye Digital Security has discovered a severe deni...

Pigeon Server 3.02.0143 - Denial of Service

Pigeon Server 3.02.0143 - Denial of Service / by Luigi Auriemma / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1" define PORT 3103 define BUFFSZ 8192 // we need at least 8180 'a's...

[Full-Disclosure] Freeze in Pigeon Server 3.02.0143

Luigi Auriemma Application: Pigeon Server http://www.tech-noel.com Versions: = 3.02.0143 Platforms: Windows Bug: freeze Risk: medium Exploitation: remote, versus server Date: 16 September 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Symantec Multiple Firewall DNS Response Denial of Service

No description provided by source. / HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response Denial-of-Service Exploit version 0.1 coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/Research/Advisories/AD20040512B.html...

Symantec Multiple Firewall DNS Response Denial of Service

Exploit for cgi platform in category dos / poc ========================================================= Symantec Multiple Firewall DNS Response Denial of Service ========================================================= / HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response...

Symantec Multiple Firewall - DNS Response Denial of Service

Symantec Multiple Firewall - DNS Response Denial of Service / HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response Denial-of-Service Exploit version 0.1 coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/Research/Advisories/AD20040512B.html...

[Full-Disclosure] EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service

Symantec Multiple Firewall DNS Response Denial-of-Service Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet...

EEYE: Symantec Multiple Firewall TCP Options Denial of Service

Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2003 Symantec Norton Internet Security 2004 Symantec Norton Internet...

Server freeze in The Rage 1.01

Luigi Auriemma Application: The Rage http://www.therageonline.com Versions: = 1.01 Platforms: Windows Bug: server freeze Risk: low Exploitation: remote, versus server Date: 23 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 Th...

Unreal engine updates and Battle Mages advisory

I have an update about the methods used to test the format string vulnerability in the Unreal engine I reported yesterday. I have solved a problem in the windows version of my proof-of-concept unrfs-poc now version 0.1.1: http://aluigi.altervista.org/poc/unrfs-poc.zip The following instead is a...

Remote crash in Ghost Recon engine

Luigi Auriemma Application: Ghost Recon engine and some games developed by Redstorm http://www.ghostrecon.com Games/Ver: Ghost Recon = 1.4 Desert Siege The Sum of all Fears = 1.1.1.0 Platforms: Windows Bug: remote crash, possible system freeze Risk: high Exploitation: remote, versus both server a...