2760 matches found
Gamespy Software Development Kit - CD-Key Validation Buffer Overflow
source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of user-supplied network data prior to copying ...
In-game buffer-overflow in the Gamespy cd-key validation SDK
Luigi Auriemma Application: Gamespy cd-key validation SDK http://www.gamespy.net Versions: before 20 November 2004 Games: due to the implementation of this SDK is hard to test and list all the vulnerable games, however the following is the official list of games that use the various Gamespy SDKs ...
Linux CD protection bypass
user with read-only access can bypass these permissions and perform write and erase operations on media in a drive...
[SA12498] Linux Kernel ide-cd SG_IO Functionality Permission Bypass Vulnerability
TITLE: Linux Kernel ide-cd SGIO Functionality Permission Bypass Vulnerability SECUNIA ADVISORY ID: SA12498 VERIFY ADVISORY: http://secunia.com/advisories/12498/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719...
CVE-2004-0813
CVE-2004-0813 is an in-the-wild/vendored vulnerability affecting SG_IO handling in pam_console within Linux PAM on service consoles. It allowed console users with access to certain device files to bypass read-only restrictions and perform unauthorized writes/erases on CD drives. Public advisories...
CVE-2002-1268
Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."...
CVE-2002-1268
The CVE-2002-1268 entry relates to Mac OS X 10.2.2, where local users can gain privileges through mounting an ISO 9600 CD (User Privilege Elevation via Mounting an ISO 9600 CD). The connected documents confirm the affected software and the vector (local privilege elevation via mounted media); how...
Ipswitch WS_FTP Server 5.0.x - CD Command Malformed File Path Remote Denial of Service
source: https://www.securityfocus.com/bid/11065/info WSFTP Server is reported prone to a remote denial of service vulnerability. This issue presents itself when the application processes a malformed file path through the 'cd' command. WSFTP Server version 5.0.2 is reported prone to this issue,...
CVE-2004-0677
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...
SUSE Security Announcement: Live CD 9.1 (SuSE-SA:2004:011)
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity 1-10: 8 SuSE default package: yes...
SuSE Live CD unauthorized access
Unauthorized root access via SSH is possible...
[Full-Disclosure] iDEFENSE Security Advisory 04.14.04: Buffer Overflow in ISO9660 File System Component of Linux Kernel
Buffer Overflow in ISO9660 File System Component of Linux Kernel iDEFENSE Security Advisory 04.14.04 www.idefense.com/application/poi/display?id=101&type=vulnerabilities April 14, 2004 I. BACKGROUND Linux is a free Unix-type operating system originally created by Linus Torvalds with the assistanc...
cdp buffer overflow vulnerability
Product: cdp - console cd player Versions: All Bug: Buffer overflow Impact: Attackers can execute arbitrary code Risk: Medium/High Date: March 31, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction cdp is... "cdp is a program that plays CDs at the...
cdp buffer overflow
Buffer overflow on oversized CD track name...
Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more)
Luigi Auriemma Application: Gamespy SDK used for online cd-keys validation in third party code hidden "security through obscurity" code Games/ver: Battlefield 1942 = 1.6.19 and 1.6rc1 http://www.battlefield1942.com Contract Jack = 1.1 http://nolf.sierra.com Gore = 1.48 1.49 http://gore.cryogame.c...
CVE-2003-1155
X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...
[SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0524
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...
CVE-2003-0392
The CVE-2003-0392 entry concerns ST FTP Service 3.0, where a vulnerability in the CD command handling enables directory traversal. An attacker can cause the server to list arbitrary directories by supplying a drive-letter argument (for example, CD E:), potentially exposing files outside the FTP j...