Epic Games Unreal Tournament 3 UT3 WebAdmin目录遍历漏洞

BUGTRAQ ID: 31272 CNCAN ID：CNCAN-2008092305 Unreal Tournament 3 UT3是一款基于Unreal引擎的游戏程序，包含内部WEB服务程序。 Unreal Tournament 3 UT3包含的管理员接口不正确过滤用户输入，远程攻击者可以利用漏洞以WEB权限查看web root外的文件内容。 提交类似如下的请求，可绕过WEB ROOT限制，以WEB权限查看系统文件内容： GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0 Host: localhost Epic Games UT3...

Gentoo Security Advisory GLSA 200603-11 (freeciv)

The remote host is missing updates announced in advisory GLSA 200603-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-26 (bsd-games)

The remote host is missing updates announced in advisory GLSA 200603-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-26 (bsd-games)

The remote host is missing updates announced in advisory GLSA 200603-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability

No description provided by source. Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server...

Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability ================================================================= Luigi Auriemma Application: Unreal...

Unreal Tournament 3 1.3 - Directory Traversal

Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server Date: 21 Sep 2008 Author: Luigi...

Failed assertion in the Unreal engine

Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: the games which have been tested and resulted vulnerable are Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, Shadow Ops and possibly others. instead those which...

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities source: https://www.securityfocus.com/bid/31141/info Unreal Engine is prone to multiple remote format-string vulnerabilities. Attackers can exploit the issues to execute arbitrary code within the context of a client application...

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities

source: https://www.securityfocus.com/bid/31141/info Unreal Engine is prone to multiple remote format-string vulnerabilities. Attackers can exploit the issues to execute arbitrary code within the context of a client application that uses the vulnerable engine...

NULL pointer in Unreal Tournament 2004 v3369

Luigi Auriemma Application: Unreal Tournament 2004 http://www.unrealtournament2003.com/ut2004/index.html Versions: = v3369 Platforms: Windows and Linux Bug: NULL pointer Exploitation: remote, versus server Date: 30 Jul 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Memory corruption and NULL pointer in Unreal Tournament III 1.2

Luigi Auriemma Application: Unreal Tournament III http://www.unrealtournament3.com Versions: = 1.2 and 1.3beta4 Platforms: Windows tested, Linux, PS3 and Xbox360 Bugs: A memory corruption B NULL pointer Exploitation: remote, versus server Date: 30 Jul 2008 Author: Luigi Auriemma e-mail:...

ZDaemon games server DoS

NULL pointer dereference on malformed network packet...

Monolith Games Local Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h include "winerr.h" define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include net/inet.h...

Crysis games server DoS

NULL pointer dereference on oversized request to HTTP/XML-RPC interface...

Debian: Security Advisory (DSA-316)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 327-1 (xbl)

The remote host is missing an update to xbl announced via advisory DSA 327-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-322)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-390)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 926-2 (ketm)

The remote host is missing an update to ketm announced via advisory DSA 926-2. Steve Kemp from the Debian Security Audit Project discovered a buffer overflow in ketm, an old school 2D-scrolling shooter game, that can be exploited to execute arbitrary code with group games privileges. For the old...