[Full-Disclosure] Code execution in the Unreal Engine through \secure\ packet

Luigi Auriemma Application: Unreal Engine http://unreal.epicgames.com Vulnerable games: - DeusEx = 1.112fm - Devastation = 390 - Mobile Forces = 20000 - Nerf Arena Blast = 1.2 - Postal 2 = 1337 - Rune = 107 - Tactical Ops = 3.4.0 - TNN Pro Hunter ? - Unreal 1 = 226f - Unreal II XMP = 7710 - Unrea...

DSA-484 xonix - failure to drop privileges

Bulletin has no description...

CVE-2003-0612

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2003-0607

Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...

CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

DEBIAN-CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

DEBIAN-CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

HALO Network Server Detection

The remote host is running a version of HALO Network Server. The server is used to host Internet and Local Area Network LAN games. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid12117; scriptversion"1.14";...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2003-0607

Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...

CVE-2003-0607

CVE-2003-0607 affects the xconq package (version 7.4.1) via a local buffer overflow in the USER and DISPLAY environment variable handling, enabling a local attacker to gain the gid 'games'. Connected sources confirm the issue in Debian advisory DSA-354 for xconq and note that a fix was released (...

CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

CVE-2003-0828

CVE-2003-0828 describes a buffer overflow in the Debian freesweep utility (Debian GNU/Linux 3.0) that could let a local user gain privileges in the games group by processing environment variables. The vulnerability is caused by an overflow in freesweep and is documented in Debian security advisor...

CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2004-0158

CVE-2004-0158 affects the game lbreakout2 via a buffer overflow in its handling of the HOME environment variable, enabling a local attacker to gain the 'games' group privileges by overflowing stack/global buffers while the process copies HOME to various components (editor.c, theme.c, manager.c, c...

Format string bug in EpicGames Unreal engine

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Games: - America's Army - DeusEx - Devastation - Magic Battlegrounds - Mobile Forces - Nerf Arena Blast - Postal 2 - Rainbow Six: Raven Shield - Rune - Sephiroth: 3rd episode the Crusade - Star Trek: Klingon Honor Guard -...

CVE-2003-0612: Undefined Security Weakness

Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...