DTSA-13-1 evolution - format string vulnerabilities

Bulletin has no description...

CVE-2005-2763

Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2005-2763

Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2005-2763

OpenTTD is affected by format string vulnerabilities (root cause: format string handling flaws) that exist in versions before 0.4.0.1. This can cause a crash and may allow remote code execution. Affected package: games-simulation/openttd = games-simulation/openttd-0.4.0.1-r1 (GLSA 200509-03). The...

OpenTTD game (Transport Tycoon Deluxe clone) format string bug

Format string bug on network data parsing...

[Full-disclosure] [ GLSA 200509-03 ] OpenTTD: Format string vulnerabilities

Gentoo Linux Security Advisory GLSA 200509-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-2763: Undefined Security Weakness

Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

Debian DSA-795-2 : proftpd - potential code execution

infamous42md reported that proftpd suffers from two format string vulnerabilities. In the first, a user with the ability to create a directory could trigger the format string error if there is a proftpd shutdown message configured to use the '%C', '%R', or '%U' variables. In the second, the error...

GLSA-200509-03 : OpenTTD: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200509-03 OpenTTD: Format string vulnerabilities Alexey Dobriyan discovered several format string vulnerabilities in OpenTTD. Impact : A remote attacker could exploit these vulnerabilities to crash the OpenTTD server or client and...

OpenTTD: Format string vulnerabilities

Background OpenTTD is an open source clone of the simulation game "Transport Tycoon Deluxe" by Microprose. Description Alexey Dobriyan discovered several format string vulnerabilities in OpenTTD. Impact A remote attacker could exploit these vulnerabilities to crash the OpenTTD server or client an...

[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 795-2 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 795-2 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

CVE-2005-1857

Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply...

CVE-2005-1857

Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply...

DEBIAN-CVE-2005-1857

Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply...

CVE-2005-1857

Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply...

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

CVE-2005-2774

CVE-2005-2774 affects Lithium II mod 1.24 for Quake 2. The vulnerability is a format string flaw in the nickname handling that can cause a server denial of service and may allow arbitrary code execution. Exploitation details are not provided in the available documents; no specific exploit vectors...

CVE-2005-1857

The CVE-2005-1857 issue affects simpleproxy prior to version 3.4, where a format string vulnerability in the proxy’s handling of HTTP replies can allow a remote attacker to execute arbitrary code. Public sources describe exploitation via replies from remote HTTP proxies, enabling code execution w...