685 matches found
Mandrake Linux Security Advisory : nas (MDKSA-2007:065)
Luigi Auriemma discovered a number of problems with the nas Network Audio System daemon that could be used to crash nasd. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit
No description provided by source. Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Limited format string in Netrek 2.12.0
Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...
Netrek 2.12.0 - 'pmessage2()' Remote Limited Format String
Luigi Auriemma Application: Netrek http://www.netrek.org Versions: \0\0\0"; strcatfromstr, me-pmapc...
GLSA-200610-13 : Cheese Tracker: Buffer Overflow
The remote host is affected by the vulnerability described in GLSA-200610-13 Cheese Tracker: Buffer Overflow Luigi Auriemma reported that the XM loader of Cheese Tracker contains a buffer overflow vulnerability in the loaderXM::loadintrumentinternal function from loaders/loaderxm.cpp. Impact : An...
GLSA-200610-09 : libmusicbrainz: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200610-09 libmusicbrainz: Multiple buffer overflows Luigi Auriemma reported a possible buffer overflow in the MBHttp::Download function of lib/http.cpp as well as several possible buffer overflows in lib/rdfparse.c. Impact : A...
DSA-1180-1 bomberclone
Bulletin has no description...
DSA-1179-1 alsaplayer
Bulletin has no description...
[SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1162-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2006 http://www.debian.org/security/faq -...
Multiple buffer-overflows in libmusicbrainz 2.1.2
Luigi Auriemma Application: libmusicbrainz http://musicbrainz.org/doc/libmusicbrainz Versions: = 2.1.2 and = SVN 8406 current SVN Platforms: Windows, nix, BSD, Mac and others Bugs: A buffer-overflow in MBHttp::Download B various buffer-overflows in rdfparse.c Exploitation: remote Date: 13 Aug 200...
GLSA-200608-16 : Warzone 2100 Resurrection: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200608-16 Warzone 2100 Resurrection: Multiple buffer overflows Luigi Auriemma discovered two buffer overflow vulnerabilities in Warzone 2100 Resurrection. The recvTextMessage function of the Warzone 2100 Resurrection server and th...
OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC)
/ by Luigi Auriemma / include include include include ifdef WIN32 include // htonl else include endif define VER "0.1" define HEAPOVERSZ 512 define ITPHEAPOVERSZ 150000 define ALLOCSAMPLESZ 39 & 7 + 16 define SONGITPROJECT 0x20000 void fwbofFILE fd, int len, int chr; void fwi32FILE fd, int num;...
OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC)
OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows PoC / by Luigi Auriemma / include include include include ifdef WIN32 include // htonl else include endif define VER "0.1" define HEAPOVERSZ 512 define ITPHEAPOVERSZ 150000 define ALLOCSAMPLESZ 39 & 7 + 16 define SONGITPROJECT 0x20000 void...
OpenMPT <= 1.17.02.43 Multiple Remote Buffer Overflow Exploit PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h ifdef WIN32 include winsock.h // htonl else include netinet/in.h endif define VER "0.1" define HEAPOVERSZ 512 define ITPHEAPOVERSZ 150000 define ALLOCSAMPLESZ 39 & 7 + 16...
GLSA-200608-14 : DUMB: Heap buffer overflow
The remote host is affected by the vulnerability described in GLSA-200608-14 DUMB: Heap buffer overflow Luigi Auriemma found a heap-based buffer overflow in the itreadenvelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a '.it' Impulse Track...
Festalon 0.5 - .HES Remote Heap Buffer Overflow
Festalon 0.5 - .HES Remote Heap Buffer Overflow // source: https://www.securityfocus.com/bid/19402/info A buffer-overflow vulnerability occurs in the Festalon application because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...
Festalon 0.5 - '.HES' Remote Heap Buffer Overflow
// source: https://www.securityfocus.com/bid/19402/info A buffer-overflow vulnerability occurs in the Festalon application because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow attackers to execute...
DSA-1142-1 freeciv - missing bouncary checks
Bulletin has no description...
GLSA-200607-13 : Audacious: Multiple heap and buffer overflows
The remote host is affected by the vulnerability described in GLSA-200607-13 Audacious: Multiple heap and buffer overflows Luigi Auriemma has found that the adplug library fails to verify the size of the destination buffers in the unpacking instructions, resulting in various possible heap and...
Multiple vulnerabilities in Open Cubic Player 2.6.0pre6 / 0.1.10_rc5
Luigi Auriemma Application: Open Cubic Player http://www.cubic.org/player/ http://stian.lunafish.org/coding-ocp.php Versions: DOS/Windows = 2.6.0pre6 Linux/BSD = 0.1.10rc5 Platforms: DOS, Windows, nix, BSD and others Bugs: A buffer-overflow in mpLoadS3M B buffer-overflow in itload.cpp C...