CVE-2007-5742

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

CVE-2007-6201

Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service hang via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turncmd option...

CVE-2007-5742

CVE-2007-5742 is a directory-traversal vulnerability in the Wesnoth WML engine preprocessor affecting Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12. The issue allows remote attackers to read arbitrary files via directory traversal sequences (".."), as described in the initial advisory. The v...

CVE-2007-6201

The vulnerability CVE-2007-6201 affects Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12, where a flaw in a “faulty add-on” and related to the turn_cmd option allows a denial of service (hang) and potentially execution of other commands via unknown vectors. The connected documents confirm affec...

DTSA-90-1 wesnoth - information disclosure

Bulletin has no description...

CVE-2007-5742: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

CVE-2007-6201: Undefined Security Weakness

Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service hang via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turncmd option...

Fedora 7 : wesnoth-1.2.7-1.fc7 (2007-2496)

Security fix release: A malicious user could send a long chat message with multibyte characters, the server would truncate the message on a fixed length, without paying attention to the multibyte characters. This led to invalid utf-8 on the client and an uncaught exception was thrown. Note that...

[SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-2 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

Debian DSA-1386-1 : wesnoth - programming error

A problem has been discovered in the processing of chat messages. Overly long messages are truncated by the server to a fixed length, without paying attention to the multibyte characters. This leads to invalid UTF-8 on clients and causes an uncaught exception. Note that both wesnoth and the wesno...

DSA-1386-1 wesnoth

Bulletin has no description...

Design/Logic Flaw

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...

CVE-2007-3917

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...

CVE-2007-3917

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...

CVE-2007-3917

CVE-2007-3917 affects the Wesnoth multiplayer engine. The vulnerability allows a remote server to trigger a denial of service (crash) by sending a long message containing multibyte characters that, when truncated, yields an invalid UTF-8 string and causes an uncaught exception in server.cpp:trunc...

CVE-2007-3917

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...

CVE-2007-3917: Use of Externally-Controlled Format String

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...