AMX Mod 0.9.2 - Remote 'amx_say' Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the 'amxsay' command. ...

CVE-2007-5713

Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to geolocation, which triggers an error message from the 1 geoipcode2 or 2 geoipcode3 function, leadin...

Buffer overflow

Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to geolocation, which triggers an error message from the 1 geoipcode2 or 2 geoipcode3 function, leadin...

CVE-2007-5713

AMX Mod X 1.76d GeoIP module (Half-Life Server) is affected by an off-by-one error in geoip_code2/geoip_code3 that leads to a buffer overflow, potentially allowing arbitrary code execution or DoS. This CVE-2007-5713 entry documents the impact; no explicit exploit details or remediation versions a...

CVE-2003-1381

AMX 0.9.2 and earlier, a plugin for Valve Software’s Half-Life Server, is affected by a format string vulnerability in the amx_say command. This allows remote attackers to execute arbitrary commands. Exploitation details, affected versions beyond those stated, and mitigations are not provided in ...

CVE-2003-1381

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...

Buffer overflow

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

CVE-2007-3536

CVE-2007-3536 affects the AMX NetLinx VNC (AmxVnc) ActiveX control (AmxVnc.dll 1.0.13.0). The vulnerability is described as multiple buffer overflows that allow remote code execution when long values are supplied to the Host, Password, or LogFile properties. The NVD entry assigns a CVSSv2 base sc...

CVE-2007-3536

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

No description provided by source. !-- 21.17 23/06/2007 AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 remote buffer overflow exploit / tested against IE6 on xp sp2 it found this one inside GHDB, dork by JimmyNeutron: WebControl intitle:"AMX NetLinx" description: "AMX Netlinx is a server...

amx-activex.txt

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%...

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow 'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%4...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...

AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%42%41%30%42%41%58%38%41%42%50%75%68%69%39%6c%38%68%31%54%43%30%47%70%57%70%4...

CVE-2006-5427

CVE-2006-5427 is a PHP remote file inclusion vulnerability in Php AMX 0.9.0 (plugins/main.php). The root cause is insecure handling of plug_path when register_globals is enabled or magic_quotes_gpc is disabled, allowing an attacker to pass a URL and execute arbitrary PHP code on the server. Affec...

Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability

No description provided by source. phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code php/plugins/main.php: ?php...

PHP AMX 0.90 - pluginsmain.php Remote File Inclusion

PHP AMX 0.90 - pluginsmain.php Remote File Inclusion phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code...

Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Php AMX 0.90 plugins/main.php Remote File Include Vulnerability ================================================================= phpamx 0.90 Class: Remote|Local File Includ...

PHP AMX 0.90 - '/plugins/main.php' Remote File Inclusion

phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code php/plugins/main.php: Vuln 1.0 - require registerglobals = On...

CVE-2003-1381

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...