Format string bug in Half-Life client, but is it really exploitable???

Hey, some weeks ago I found a format string bug in the Half-Life client. The bug happens when an unknown command is used and the game returns a string like the following: x02Unknown command: wrongcommandusedn | | | | | | | line feed | | command used exactly what has been written in the | | consol...

Half-Life 1.1 - Invalid Command Error Response Format String

source: https://www.securityfocus.com/bid/8730/info It has been reported that Half-Life clients may be prone to a format string vulnerability. The problem occurs when an invalid command is issued to the server, and an error response is returned and displayed by the client. If a format specifier...

Half-Life 1.1 - Invalid Command Error Response Format String

Half-Life 1.1 - Invalid Command Error Response Format String source: https://www.securityfocus.com/bid/8730/info It has been reported that Half-Life clients may be prone to a format string vulnerability. The problem occurs when an invalid command is issued to the server, and an error response is...

CVE-2003-0697

CVE-2003-0697 describes a format string vulnerability in the lpd component within the bos.rte.printers fileset on AIX 4.3–5.2, reportedly triggered when debug is enabled. The flaw allows local users to cause a denial of service (crash) and could potentially escalate to root privileges. Affected s...

CVE-2003-0784

Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers...

CVE-2003-0697

Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service crash or gain root privileges...

CVE-2003-0784

The entries describe a Format string vulnerability in the tsm package (bos.rte.security fileset) on AIX 5.2. The root cause is a format string flaw that can be exploited to gain root privileges via login (remote) and to gain privileges locally via login, su, or passwd when a username contains for...

Multiple IBM DB2 bugs

Format string bugs, buufer overflows...

CVE-2003-0708

Format string vulnerability in LinuxNode node before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2003-0708

CVE-2003-0708 affects LinuxNode (node) up to version 0.3.2, due to a format string vulnerability that could allow denial of service or arbitrary code execution. The CVSSv2 base score is 7.5 (Network, Low attack complexity, No authentication, Partial impact). Public references in the provided docu...

eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit

Exploit for unknown platform in category remote exploits ======================================================== eMule/xMule/LMule OPSERVERMESSAGE Format String Exploit ======================================================== / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability...

eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit

No description provided by source. / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability SecurityFocus BID 8443 proof of concept code version 1.0 Aug 29 2003 by Rémi Denis-Courmont This vulnerability was found by: Stefan Esser [email protected] whose original advisory may be fetched...

eMulexMuleLMule - OP_SERVERMESSAGE Format String

eMulexMuleLMule - OPSERVERMESSAGE Format String / eMule/xMule/LMule OPSERVERMESSAGE Format String Vulnerability SecurityFocus BID 8443 proof of concept code version 1.0 Aug 29 2003 by Rémi Denis-Courmont This vulnerability was found by: Stefan Esser whose original advisory may be fetched from:...

[SECURITY] [DSA 274-1] New node packages fix remote root vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 274-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2003 http://www.debian.org/security/faq -...

Multiple node bugs

Buffer overflows, format string bugs...

CVE-2003-0672

Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message...

CVE-2003-0616

Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...

emule/xmule/lmule multiple bugs

Multiple bugs including format string and buffer overflows...

Dropbear SSH Server Username Remote Format String

The remote host is runnning Dropbear SSH. There is a format string vulnerability in all versions of the Dropbear SSH server up to and including version 0.34. An attacker may use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc";...

CVE-2003-0584

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...