37 matches found
CVE-2009-3591
CVE-2009-3591 affects Dopewars 1.5.12 where the server-side DOs via the Jet command (“REQUESTJET” message) can crash the application due to insufficient input validation. Multiple security scans/docs confirm a remote DoS resulting in a segmentation fault on the server; OpenVAS entries and Metaspl...
CVE-2009-3591
Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...
Dopewars 1.5.12 Server Denial of Service
No description provided by source. Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack \ of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the applicatio...
Dopewars 1.5.12 Server Denial of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111n^^Acfoon^AV65536n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Dopewars game server DoS
Crash on parsing TCP/7902 data...
Dopewars 1.5.12 Denial Of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Dopewars Server 1.5.12 - Denial of Service
Dopewars Server 1.5.12 - Denial of Service Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the...
Dopewars 1.5.12 Server Denial of Service
Exploit for unknown platform in category dos / poc ======================================== Dopewars 1.5.12 Server Denial of Service ======================================== Title: Dopewars 1.5.12 Server Denial of Service CVE-ID: OSVDB-ID: Author: Doug Prostko Published: 2009-10-06 Verified: yes...
Dopewars Server 1.5.12 - Denial of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
CVE-2005-4610
Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors...
CVE-2005-4610
Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors...
CVE-2005-4610
Technical details about CVE-2005-4610 are not publicly available in the provided documents. Monitor for updates for affected software, exact root cause, vulnerable components, and remediation information.
[SA18246] Dopewars Server Message Logging Format String Vulnerability
TITLE: Dopewars Server Message Logging Format String Vulnerability SECUNIA ADVISORY ID: SA18246 VERIFY ADVISORY: http://secunia.com/advisories/18246/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Dopewars 1.x http://secunia.com/product/6713/ DESCRIPTION: A...
Dopewars format string vulnerability
FOrmat string bug on file logging...
CVE-2005-4610
Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors...
Policy - Dopewars Gaming Server Detection
Binary data 5205.prm...
2dopewars_exploits.txt
two security holes i found for local use in dopewars1.4.7-current. dopewars is setgid=games. by: [email protected]. LOCAL VULNERABILITY 1: insecure popen call, a shell script can handle this. -- dopewars.sh start -- !/bin/sh dopewars.sh1.4.7: shell script by [email protected]. gives...