CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. Affected: X-CD-Roast 0.98 alpha10–alpha14. Root cause: symlink manipulation enabling file overwrite. Impact: as described, enables partial impact to confidentiali...

CVE-2004-2004

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

CVE-2003-1155

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-2004

CVE-2004-2004 affects the SUSE LINUX 9.1 Personal edition Live CD, where the root account is configured without a password. This allows remote attackers to gain root privileges via SSH. The vulnerability is described with a CVSS base score of 10.0 (HIGH) and a network attack vector with no authen...

CVE-2003-1155: Undefined Security Weakness

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-2004: Undefined Security Weakness

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

CVE-2005-0330

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

CVE-2002-1354: Undefined Security Weakness

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

Moderate: Red Hat Security Advisory: grip security update

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

CVE-2004-1643: Undefined Security Weakness

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2005-0330

CVE-2005-0330 affects Painkiller 1.35 and earlier (and possibly other versions before 1.61). A buffer overflow in processing the cd-key hash allows remote authenticated users to trigger a denial of service and, possibly, execute arbitrary code. Impact and exploitation details are based on the pro...

CVE-2005-0278: Undefined Security Weakness

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

CVE-2005-0330: Undefined Security Weakness

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application durin...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application during server-side authorization of a Gamespy cd-key hash. Painkiller versions...

CVE-2004-0813

Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...

CVE-2004-1190

The CVE-2004-1190 issue affects SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9, where commands sent to CD devices opened read-only were not properly checked. This could permit a local attacker to perform unauthorized writes to the firmware of connected SCSI devices, potentially c...

CVE-2004-1190: Undefined Security Weakness

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices...