Lucene search
+L

68 matches found

Cvelist
Cvelist
added 2006/02/18 9:0 p.m.22 views

CVE-2006-0771

Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly...

7.8AI score0.03062EPSS
SaveExploits0References7
CVE
CVE
added 2006/02/18 9:0 p.m.53 views

CVE-2006-0771

CVE-2006-0771 affects PunkBuster 1.180 and earlier (as used by Soldier of Fortune II and possibly other games). The issue is a format-string vulnerability in handling invalid cvar values when the server kicks a player and records the reason, allowing remote attackers to cause a denial of service ...

6.4CVSS7.8AI score0.03062EPSS
SaveExploits0References7Affected Software1
securityvulns
securityvulns
added 2006/02/17 12:0 a.m.43 views

PunkBuster anti-cheat server format string vulnerability

Format string bug with "reason" parameter if used with Soldier of Fortune II game...

2.5AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2006/02/17 12:0 a.m.62 views

[Full-disclosure] Soldier of Fortune II format string through PunkBuster 1.180

Luigi Auriemma Application: Soldier of Fortune II with PunkBuster enabled http://www.ravensoft.com/soldier2.html http://www.PunkBuster.com Versions: PB for server = 1.180 Platforms: Windows, Linux and Mac Bug: format string Exploitation: remote, versus server in-game Date: 16 Feb 2006 Author: Lui...

0.4AI score
SaveExploits0
CVE
CVE
added 2005/08/16 4:0 a.m.44 views

CVE-2004-2340

Technical details about CVE-2004-2340 are not publicly available in the provided connected documents; the entry remains unverified in accessible sources. Monitor for updates.

7.5CVSS9AI score0.0133EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2005/08/16 4:0 a.m.16 views

CVE-2004-2340

UNVERIFIABLE SQL injection vulnerability in PunkBuster Screenshot Database PB-DB Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make...

8.6AI score0.0133EPSS
SaveExploits1References5
NVD
NVD
added 2004/12/31 5:0 a.m.11 views

CVE-2004-2340

UNVERIFIABLE SQL injection vulnerability in PunkBuster Screenshot Database PB-DB Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make...

7.5CVSS8.6AI score0.0133EPSS
SaveExploits1References5
securityvulns
securityvulns
added 2004/02/20 12:0 a.m.54 views

PunkBuster SQL Injection Attack

Timberlake Advisory 200402181e-03. Program: http://pbdb.sourceforge.net/ PunkBuster screenshot management system. Simplifying the task of capturing and cataloguing screenshots. It sticks to the roof like a gecko. It supports screenshot retrieval and cataloguing to a website - which includes searc...

8.4AI score
SaveExploits0
Rows per page
Query Builder