Multiple IBM DB2 Universal Database vulnerabilities

Server crash on constant string processing in queries; endless loop on hash joins processing; multiple problems with invalid connection termination; unauthorized creation of routine based objects; array overflow on oversized number of elements in 'in' list; db2jd crash on certain clients...

CVE-2005-1703: Undefined Security Weakness

Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service server crash via a partial join packet that triggers a NULL pointer dereference...

CVE-2005-1618: Undefined Security Weakness

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

CVE-2005-0849

CVE-2005-0849 affects multiple FUN labs games (e.g., 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, US Most Wanted). The vulnerability is a remote DoS due to a malformed join packet that can cause the server to copy more memory t...

CVE-2005-0849: Undefined Security Weakness

Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service crash from invalid memory access via a malformed join packet...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1207

CVE-2004-1207 affects the Serious engine as used in Alpha Black Zero Intrepid Protocol 1.04 and earlier, the Nitro family, and Serious Sam Second Encounter 1.07. The issue allows remote attackers to trigger a denial of service (server crash) by sending a large number of UDP join requests that exc...

CVE-2004-1208: Undefined Security Weakness

Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long password field in a join request...

CVE-2004-1195: Undefined Security Weakness

Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service application crash via a join request that contains a memory address that causes the server to read arbitrary memory...

CVE-2004-1207: Undefined Security Weakness

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

ircd buffer overflow

Buffer overflow in JOIN command leads to DoS...

IRCnet IRCD 2.10 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of this vulnerability it has been...

CVE-2002-0571

CVE-2002-0571 affects Oracle9i database server 9.0.1.x and allows local users to access restricted data via a SQL query that uses ANSI outer join syntax. The underlying cause is not detailed in the provided documents, and there are no explicit remediation steps or exploit details in the connected...

CVE-2002-0571: Undefined Security Weakness

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...

Trillian 0.73/0.74 - IRC JOIN Buffer Overflow

// source: https://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code with the privileges of the client. This issue wa...

CVE-2002-0571

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...

unreal-dos.txt

/ MaD SKiLL 'H' yay, it's us! Visit our website at http://www.madskill.tk for more info about us. Topic: Serious flaws in Unreal IRCd = 3.1.1 Vulnerabilities found by Zombie Shouts go to: MsH!, DFA, IceDragon, Key for his kickass network, r0ut3r This article security advisory was written by skyri...

Unauthorized access via OUTER JOIN in Oravle

It's possible to access tables not granted to access...

ansi outer join syntax in Oracle allows access to any data

Hi all I thought this list may be interested in this issue, apologies if its known here already. Oracle 9i includes the new ANSI outer join syntax. Oracle still supports the old syntax but in the new syntax there is a serious security issue that allows any user to view any data. here is an exampl...