CVE-2003-1155: Undefined Security Weakness

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-2004: Undefined Security Weakness

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

CVE-2005-0330

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

CVE-2002-1354: Undefined Security Weakness

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

Moderate: Red Hat Security Advisory: grip security update

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

CVE-2004-1643: Undefined Security Weakness

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2005-0330

CVE-2005-0330 affects Painkiller 1.35 and earlier (and possibly other versions before 1.61). A buffer overflow in processing the cd-key hash allows remote authenticated users to trigger a denial of service and, possibly, execute arbitrary code. Impact and exploitation details are based on the pro...

CVE-2005-0278: Undefined Security Weakness

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

CVE-2005-0330: Undefined Security Weakness

Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash...

[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application durin...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application during server-side authorization of a Gamespy cd-key hash. Painkiller versions...

CVE-2004-0813

Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...

CVE-2004-1190

The CVE-2004-1190 issue affects SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9, where commands sent to CD devices opened read-only were not properly checked. This could permit a local attacker to perform unauthorized writes to the firmware of connected SCSI devices, potentially c...

CVE-2004-1190: Undefined Security Weakness

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices...

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to...

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow

source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of user-supplied network data prior to copying ...

In-game buffer-overflow in the Gamespy cd-key validation SDK

Luigi Auriemma Application: Gamespy cd-key validation SDK http://www.gamespy.net Versions: before 20 November 2004 Games: due to the implementation of this SDK is hard to test and list all the vulnerable games, however the following is the official list of games that use the various Gamespy SDKs ...

[SA12498] Linux Kernel ide-cd SG_IO Functionality Permission Bypass Vulnerability

TITLE: Linux Kernel ide-cd SGIO Functionality Permission Bypass Vulnerability SECUNIA ADVISORY ID: SA12498 VERIFY ADVISORY: http://secunia.com/advisories/12498/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719...