9751 matches found
[SECURITY] Fedora 15 Update: quake3-1.36-11.svn2102.fc15
This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...
[SECURITY] Fedora 14 Update: quake3-1.36-11.svn2102.fc14
This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...
PT-2011-4250
Name of the Vulnerable Software and Affected Versions ioQuake3 engine versions prior to the version used in World of Padman 1.2 World of Padman versions 1.2 and earlier Tremulous version 1.1.0 ioUrbanTerror version 2007-12-20 Description The issue allows remote attackers to execute arbitrary code...
CVE-2011-3012: Improper Input Validation
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...
Richard Thieme Got Dark
Richard Thieme, the Obi-Wan Kenobi of the security community holds forth during his Black Hat talk: “Staring into the Abyss: The Dark Side of Security and Professional Intelligence.” Thieme, an IT security consultant and published author, had a tough message, telling them that the world is “grey...
CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
DEBIAN-CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
Code injection
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
UBUNTU-CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
CVE-2011-1412
CVE-2011-1412 affects the ioQuake3 engine’s Unix/Linux build used by World of Padman 1.5.x (before 1.5.1.1) and OpenArena 0.8.x-15/0.8.x-16. The vulnerability resides in sys/sys_unix.c where a long fs_game variable can be tainted with shell metacharacters, allowing a remote game server to execute...
CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
CVE-2011-1412: Improper Input Validation
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
PT-2011-3108
Name of the Vulnerable Software and Affected Versions ioQuake3 engine versions prior to 1.5.1.1 World of Padman versions 1.5.x prior to 1.5.1.1 OpenArena versions 0.8.x-15 and 0.8.x-16 Description The issue allows remote game servers to execute arbitrary commands via shell metacharacters in a lon...
Indonesia Web Design (link-directory.php?cid) (link-directory.php?pid) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Indonesia Web Design link-directory.php?cid link-directory.php?pid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.webhostingbali.com/ Persian Gulf 4 Ever! Dork : "Powere...
DotComEgypt (products.php?cat_id) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability DotComEgypt products.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.dotcomegypt.com/ Persian Gulf 4 Ever! Dork : "Powered by DotCom" "inurl:products.php?catid=...
Design/Logic Flaw
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
CVE-2011-2779: Undefined Security Weakness
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...