Py2Play: Remote execution of arbitrary Python code

Background Py2Play is a peer-to-peer network game engine written in Python. Pickling is a Python feature allowing to serialize Python objects into string representations called pickles that can be sent over the network. Description Arc Riley discovered that Py2Play uses Python pickles to send...

GLSA-200509-09 : Py2Play: Remote execution of arbitrary Python code

The remote host is affected by the vulnerability described in GLSA-200509-09 Py2Play: Remote execution of arbitrary Python code Arc Riley discovered that Py2Play uses Python pickles to send objects over a peer-to-peer game network, and that clients accept without restriction the objects and code...

Tetrinet server detection

The remote host runs a Tetrinet game server on this port. Make sure the use of this software is done in accordance to your security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid19608; scriptversion"1.17";...

CVE-2005-2864

URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...

Urban game buffer overflow

Bufer overflow during environment variables parsing allow to obtain egid games...

World Poker Championship game buffer overflow

Buffer overflow on oversized player's name...

CVE-2004-2361

The CVE-2004-2361 issue affects the Digital Reality game engine as used in Haegemonia 1.0–1.0.7 and Desert Rats vs. Afrika Korps 1.0. A remote attacker can cause a crash (DoS) by sending a chat message with an oversized payload, triggering an out-of-bounds read. The available documents do not pro...

CVE-2004-2361

Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service crash via a chat message with a large message size, which triggers an out-of-bounds read...

Multiple Race Drivers game vulnerabilities

Buffer overflows, format string bugs,...

In-game /ignore crash in Soldier of Fortune II 1.03

Luigi Auriemma Application: Soldier of Fortune II http://sof2.ravensoft.com Versions: 1.02x and 1.03 Platforms: Windows, Linux and Mac Bug: bad memory access Exploitation: remote, versus server in-game Date: 29 Jun 2005 Author: unknown, found in the wild and reported to me by two admins Advisory:...

[Full-disclosure] Crash in Stronghold 2 1.2

Luigi Auriemma Application: Stronghold 2 http://www.stronghold2.com Versions: = 1.2 Platforms: Windows Bug: exception/crash Exploitation: remote, versus server Date: 30 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...

Firefly Studios Stronghold 2 - Remote Denial of Service

Firefly Studios Stronghold 2 - Remote Denial of Service source: https://www.securityfocus.com/bid/13814/info Stronghold 2 is affected by a remote denial of service vulnerability. The issue arises when the game server handles a specially crafted packet. Stronghold 2 1.2 and prior versions are...

Terminator 3: War of the Machines game multiple vulnerabilities

Buffer overflow, DoS...

Endless loop in Halo 1.06

Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.06 and Custom Edition 1.00 Platforms: Windows Bug: endless loop Exploitation: remote, versus server Date: 24 May 2005 Author: Luigi Auriemma e-mail: [email protected] web:...

Gearbox Software Halo Game Server 1.061.07 - Infinite Loop Denial of Service

Gearbox Software Halo Game Server 1.061.07 - Infinite Loop Denial of Service source: https://www.securityfocus.com/bid/13728/info The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop...

Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service

source: https://www.securityfocus.com/bid/13728/info The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop. This issue was reported to affect Halo Game Server 1.06; earlier versions are...

Warrior Kings game multiple vulnerabilities

Format string bug, NULL pointer dereference...

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String

source: https://www.securityfocus.com/bid/13711/info Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function. This vulnerability allows remote attackers...

Warrior Kings: Battles 1.23 - Remote Denial of Service

Warrior Kings: Battles 1.23 - Remote Denial of Service source: https://www.securityfocus.com/bid/13712/info Warrior Kings: Battles is susceptible to a remote denial of service vulnerability. This is due to a failure of the game server to properly handle exceptional conditions. This vulnerability...

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String

Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String source: https://www.securityfocus.com/bid/13711/info Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a...