CVE-2007-5711

The CVE-2007-5711 entry concerns Massive Entertainment’s World in Conflict (versions 1.001 and earlier). The vulnerability allows remote attackers to cause a denial-of-service (via a large packet) by targeting TCP or UDP port 48000. The provided documents do not include concrete exploitation vect...

CVE-2007-5711: Improper Input Validation

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

CVE-2003-1460: Undefined Security Weakness

Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information...

CVE-2002-2301

Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database...

World in Conflict GetMagicNumberString函数远程拒绝服务漏洞

BUGTRAQ ID: 25985 World in Conflict是Massive娱乐公司开发的一款RTS即时战略游戏。 World in Conflict处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器程序崩溃。 World in Conflict游戏服务器的GetMagicNumberString函数在VOIP端口52999上获得从客户端接受到数据的第三个字节，如果这个值有效的话就返回文本字符串，如果无效的话返回NULL，然后该函数的返回的字符串会与另一个字符串做比较，这里会出现空指针访问，导致服务器崩溃。 Massive Entertainment World i...

NULL pointer crash in World in Conflict 1.000

Luigi Auriemma Application: World in Conflict http://www.worldinconflict.com Versions: = 1.000 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 09 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The CVE concerns Massive Entertainment’s World in Conflict (version 1.000 and earlier). The vulnerability stems from the GetMagicNumberString function, where processing a crafted string sent to the VoIP port 52999/tcp can trigger a NULL dereference and cause a daemon crash, resulting in a denial ...

CVE-2007-5369: Undefined Security Weakness

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

DEBIAN-CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞

BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...

Unfixed XSS vulnerability at www.worldvitalrecords.com

Security researcher Uber0n, has submitted on 08/11/2007 a cross-site-scripting XSS vulnerability affecting www.worldvitalrecords.com, which at the time of submission ranked 86657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...

DSA-1317-1 tinymux

Bulletin has no description...

Unfixed XSS vulnerability at www.worldwebsitedirectory.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.worldwebsitedirectory.com, which at the time of submission ranked 804797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. ...

CVE-2007-2063: Undefined Security Weakness

SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for 1 the server pid file, which allows local users to cause arbitrary processes to be stopped, or 2 when BPXBATCHUMASK is missing from the environment, creates HFS files with insecure permissions, which allows...

The United States Blizzard[World Of Warcraft] official program vulnerability-vulnerability warning-the black bar safety net

Battle.net clan management system using a MySQL backend, allowing users to easily upgrade and maintain the web site. System to achieve on exist input validation vulnerability, a remote attacker could use this vulnerability to executeSQL injectionattacks, unauthorized access to system administrati...