CVE-2008-7203

Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...

CVE-2008-7203

CVE-2008-7203 affects Valve Software’s Half-Life/Counter-Strike 1.6. The vulnerability allows remote attackers to cause a denial of service (crash) by sending multiple crafted login packets over the network. The description indicates the issue is triggered by crafted login data, but the exact roo...

CVE-2008-7203

Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...

Valve Software Source Engine - Format String

Valve Software Source Engine - Format String source: https://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attack...

Valve Software Source Engine - Format String

source: https://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may exploit this issue to execute arbitrar...

Valve Steam crossite scripting

Crossite scripting with steam://publisher/ URL...

[Full-disclosure] STEAM (Valve) - Phishing and Cross-site Scripting in internal browser

=========================================== = APP: STEAM - Valve Software = =========================================== - STEAM http://www.steampowered.com - Valve Software http://www.valvesoftware.com - Vulnerability Discovery: Gabriel Lima gabriel at falandodeseguranca.com -...

Steam Cross Site Scripting

STEAM - Phishing and Cross-site Scripting =========================================== = APP: STEAM - Valve Software = =========================================== - STEAM - Valve Software - Vulnerability Discovery: Gabriel Lima - http://www.falandodeseguranca.com in portuguese...

PT-2008-4686 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.31 Apache Tomcat version 5.5.0 Description: The issue allows remote attackers to bypass IP address restrictions and obtain sensitive information due to a synchronization problem and lack of thread...

CVE-2008-0128

The SingleSignOn Valve org.apache.catalina.authenticator.SingleSignOn in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2008-0128

The SingleSignOn Valve org.apache.catalina.authenticator.SingleSignOn in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

Code injection

The SingleSignOn Valve org.apache.catalina.authenticator.SingleSignOn in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2008-0128

Apache Tomcat 5.x before 5.5.21 is affected by CVE-2008-0128: when the SingleSignOn valve is used over HTTPS, the JSESSIONIDSSO cookie is not marked secure, allowing it to be sent over HTTP and potentially captured by an attacker via a crafted HTTP request. This information is supported by multip...

CVE-2008-0128

The SingleSignOn Valve org.apache.catalina.authenticator.SingleSignOn in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

CVE-2003-1381

AMX 0.9.2 and earlier, a plugin for Valve Software’s Half-Life Server, is affected by a format string vulnerability in the amx_say command. This allows remote attackers to execute arbitrary commands. Exploitation details, affected versions beyond those stated, and mitigations are not provided in ...

CVE-2003-1325

The CVE affects Valve Software’s Half-Life CSTRIKE Dedicated Server. The SV_CheckForDuplicateNames function in versions such as 1.6 and earlier is vulnerable when handling a connection string to UDP port 27015, where a backslash character at the end of the string can trigger an infinite loop and ...

CVE-2003-1325

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...

Fixed in Apache Tomcat 6.0.9

Moderate: Session hi-jacking CVE-2008-0128 When using the SingleSignOn Valve via https the Cookie JSESSIONIDSSO is transmitted without the "secure" attribute, resulting in it being transmitted to any content that is - by purpose or error - requested via http from the same server. Affects:...

CVE-2006-0734

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a backslash character at the end of a connection string to UDP port 27015...

Code injection

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a backslash character at the end of a connection string to UDP port 27015...