CVE-2006-0045

CVE-2006-0045 affects the crawl game prior to 4.0.0, where saving/loading can trigger insecure execution of programs, allowing local users to gain full privileges. Root cause: the program does not securely call external commands during save/load. Practical impact is local privilege escalation; no...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

[SECURITY] [DSA 926-1] New ketm packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 926-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23rd, 2005 http://www.debian.org/security/faq -...

GameFlyXSS.txt

GameFly XSS Vulnerability ========================= Discovered By: Matthew Benenati Release Date: 12/1/2005 Severity: Medium A cross-site scripting vulnerability exists in the search page of the popular online video game rental service GameFly. Example:...

GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...

CVE-2005-3594

gamescore.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $playername, $playerscore, and $gamename variables...

Scorched 3D: Multiple vulnerabilities

Background Scorched 3D is a clone of the classic "Scorched Earth" DOS game, adding features like a 3D island environment and Internet multiplayer capabilities. Description Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several...

Battle Carry game DoS

Game server crashes on oversized UDP packet...

Multiple Flat Frag game vulnerabilities

Multiple buffer overflows, NULL pointer reference...

Buffer-overflow and crash in FlatFrag 0.3

Luigi Auriemma Application: FlatFrag http://www.tzi.de/jfk/projects/flatfrag/ Versions: = 0.3 Platforms: Windows, Linux and more Bugs: A buffer-overflow B NULL pointer crash Exploitation: remote, versus server Date: 02 Nov 2005 Author: Luigi Auriemma e-mail: [email protected] web:...

The legendary Trojan DIY-vulnerability warning-the black bar safety net

Note: this article has been published in thehackerthe defense of 2 0 0 5 years the first 3 periods, the copyright of all its Network on the legendary Trojans a common occurrence, a service end even sold to hundreds of yuan, and the source code is a few thousand dollars or even higher price to sel...

[SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 856-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

Virtools Web Player game platform multiple vulnerabilities

Buffer overflows and directory traversal on archive extraction...

Multiple MultiTheftAuto game server vulnerabilities

DoS unallocated memory access, anonymous message-of-the-day mod modification...

p2play game engine code execution

It's possiblt to execute code thorugh object pickles...

Py2Play: Remote execution of arbitrary Python code

Background Py2Play is a peer-to-peer network game engine written in Python. Pickling is a Python feature allowing to serialize Python objects into string representations called pickles that can be sent over the network. Description Arc Riley discovered that Py2Play uses Python pickles to send...

GLSA-200509-09 : Py2Play: Remote execution of arbitrary Python code

The remote host is affected by the vulnerability described in GLSA-200509-09 Py2Play: Remote execution of arbitrary Python code Arc Riley discovered that Py2Play uses Python pickles to send objects over a peer-to-peer game network, and that clients accept without restriction the objects and code...

Tetrinet server detection

The remote host runs a Tetrinet game server on this port. Make sure the use of this software is done in accordance to your security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid19608; scriptversion"1.17";...