7331 matches found
CVE-2008-3492
America's Army aka AA or Army Game Project 2.8.3.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICEMAXCHATTERS...
Design/Logic Flaw
America's Army aka AA or Army Game Project 2.8.3.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICEMAXCHATTERS...
CVE-2008-3492
America's Army aka AA or Army Game Project 2.8.3.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICEMAXCHATTERS...
CVE-2008-3492
CVE-2008-3492 affects America's Army (AA/Army Game Project) up to version 2.8.3.1. The vulnerability allows remote attackers to trigger a denial of service (assertion failure and daemon exit) by sending a crafted UDP packet, likely involving a VoiceIndex value outside VOICE_MAX_CHATTERS. Public s...
xeroxphaser-dos.txt
!/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an empty packet to a Xerox Phaser 8400...
游戏美国陆军畸形UDP报文远程拒绝服务漏洞
BUGTRAQ ID: 30519 美国陆军（America's Army）是美国军方发布的用于激励征兵的第一人称射击游戏。 美国陆军游戏在处理畸形的请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果远程攻击者向美国陆军游戏服务器发送了单个的特制UDP报文的话，就可能触发拒绝服务的情况： Assertion failed: VoiceIndexVOICEMAXCHATTERS Department of the Army America's Army = 2.8.3.1 Department of the Army ----------------------...
Server termination in America's Army 2.8.3.1
Luigi Auriemma Applications: America's Army http://www.americasarmy.com Versions: = 2.8.3.1 Platforms: Windows tested, Linux and Mac Bug: server termination due to failed assertion Exploitation: remote, versus server Date: 02 Aug 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Xerox Phaser 8400 (reboot) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an...
Debian DSA-1623-1 : dnsmasq - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's dnsmasq packages to implement the recommended...
Buffer overflow
Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka...
CVE-2008-3409
Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka...
CVE-2008-3410
Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c...
CVE-2008-3410
CVE-2008-3410 affects Unreal Tournament 3 (versions 1.3beta4 and earlier). The vulnerability is a NULL pointer dereference in a UDP packet handling path (ut3mendo.c) when a size field exceeds the total packet length, enabling remote denial of service and daemon crash. Connected documents confirm ...
[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-1623-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...
DSA-1623-1 dnsmasq - cache poisoning
Bulletin has no description...
Debian DSA-1617-1 : refpolicy - incompatible policy
In DSA-1603-1, Debian released an update to the BIND 9 domain name server, which introduced UDP source port randomization to mitigate the threat of DNS cache poisoning attacks identified by the Common Vulnerabilities and Exposures project as CVE-2008-1447 . The fix, while correct, was incompatibl...
Debian DSA-1619-1 : python-dns - DNS response spoofing
Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...
[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9
SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...
[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
------------------------------------------------------------------------ Debian Security Advisory DSA-1617-1 [email protected] http://www.debian.org/security/ Devin Carraway July 25, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
------------------------------------------------------------------------ Debian Security Advisory DSA-1617-1 [email protected] http://www.debian.org/security/ Devin Carraway July 25, 2008 http://www.debian.org/security/faq -...