LBreakout2 2.x - Login Remote Format String

LBreakout2 2.x - Login Remote Format String / source: https://www.securityfocus.com/bid/8021/info It has been reported that lbreakout2 is vulnerable to a format string issue in the login component. This may result in an attacker executing arbitrary code on a vulnerable host. / / lbreakout2-2.5+:...

DSA-327 xbl - buffer overflows

Bulletin has no description...

DSA-322 typespeed - buffer overflow

Bulletin has no description...

StarSiege Tribes Server - Denial of Service (1)

StarSiege Tribes Server - Denial of Service 1 source: https://www.securityfocus.com/bid/8184/info StarSiege Tribes Game Server has been reported prone to a remotely triggered denial of service vulnerability. The issue presents itself when the affected server receives and processes a malformed UDP...

Zblast 1.2 - 'Username' Local Buffer Overrun

// source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive data within the variable, it may be possible...

Zblast 1.2 - Username Local Buffer Overrun

Zblast 1.2 - Username Local Buffer Overrun // source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

Batalla Naval 1.0 4 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game serve...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

Batalla Naval 1.0 4 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. / by jsk for gbnserver remote exploit dem...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game server. !/usr/bin/perl Priv8security.com remote...

Maelstrom Buffer Overflow

Maelstrom is an arcade game. There is a buffer overflow vulnerability in Maelstrom which allow local attacker arbitrary code execution. Vulnerable systems: Maelstrom 3.0.6 Maelstrom 3.0.5 Example: lucae@linux$ gdb /usr/bin/Maelstrom GNU gdb 5.2.1-2mdk Mandrake Linux Copyright 2002 Free Software...

Multiple game servers DDoS attacks

Large UDP response is sent in reply to short request withous session setup...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...

Unreal engine: results of my research

After almost 3 months, I have finally decided to release the huge advisory/paper about bugs founded in the Unreal engine and all the relative code for the vulnerabilities exploitation plus some tools that I have written during the reversing of the engine. The link for get the english advisory is:...

Epic Games Unreal Engine 436 - URL Directory Traversal

source: https://www.securityfocus.com/bid/6775/info It has been reported that a directory traversal vulnerability exists in several games using some versions of the Unreal Engine. It is possible for attackers to traverse outside of the game's installation directory using directory traversal...

Epic Games Unreal Engine 436 - URL Directory Traversal

Epic Games Unreal Engine 436 - URL Directory Traversal source: https://www.securityfocus.com/bid/6775/info It has been reported that a directory traversal vulnerability exists in several games using some versions of the Unreal Engine. It is possible for attackers to traverse outside of the game's...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...