160 matches found
[SECURITY] [DLA 202-1] wesnoth-1.8 security update
Package : wesnoth-1.8 Version : 1:1.8.5-1+deb6u1 CVE ID : CVE-2015-0844 Ignacio R. Morelle discovered that missing path restrictions in the "Battle of Wesnoth" game could result in the disclosure of arbitrary files in the users home directory if malicious campaigns/maps are loaded. For the...
MGASA-2015-0154 Updated wesnoth packages fix CVE-2015-0844
Updated wesnoth packages fix security vulnerability A severe security vulnerability in Battle of Wesnoth's game client was found which could allow a malicious user to obtain personal files and information from other players in networked multiplayer games using the built-in WML/Lua API on any...
Updated wesnoth packages fix CVE-2015-0844
Updated wesnoth packages fix security vulnerability A severe security vulnerability in Battle of Wesnoth's game client was found which could allow a malicious user to obtain personal files and information from other players in networked multiplayer games using the built-in WML/Lua API on any...
Design/Logic Flaw
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
CVE-2015-0844
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
CVE-2015-0844
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
CVE-2015-0844
Removed by vendor...
CVE-2015-0844
CVE-2015-0844 affects Battle for Wesnoth 1.7.x–1.11.x and 1.12.x before 1.12.2, where the WML/Lua API allows remote attackers to read arbitrary files via a crafted campaign or map file. The vulnerability arises from insufficient validation in the API, enabling file disclosure through malicious co...
Wesnoth File Information Disclosure Vulnerability
The Battle For Wesnoth is an open source, cross-platform, free-to-play turn-based strategy game. A file information disclosure vulnerability exists in Wesnoth. This vulnerability can be exploited by attackers to obtain sensitive information...
Debian DSA-3218-1 : wesnoth-1.10 - security update
Ignacio R. Morelle discovered that missing path restrictions in the'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Wesnoth -- Remote information disclosure
US-CERT/NIST reports: The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
[SECURITY] [DSA 3218-1] wesnoth-1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3218-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3218-1 (wesnoth-1.10 - security update)
Ignacio R. Morelle discovered that missing path restrictions in the Battle of Wesnoth game could result in the disclosure of arbitrary files in the user OpenVAS Vulnerability Test $Id: deb3218.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3218-1 using nvtgen 1.0 Scrip...
Debian: Security Advisory (DSA-3218-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wesnoth 1.x PythonAI Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable applicatio...
Debian Security Advisory DSA 1737-1 (wesnoth)
The remote host is missing an update to wesnoth announced via advisory DSA 1737-1. OpenVAS Vulnerability Test $Id: deb17371.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1737-1 wesnoth Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1737-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-0878
The readgamemap function in src/terraintranslation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service memory consumption and daemon hang via a map with a large 1 width or 2 height...