Format string bug in Half-Life client, but is it really exploitable???

Hey, some weeks ago I found a format string bug in the Half-Life client. The bug happens when an unknown command is used and the game returns a string like the following: x02Unknown command: wrongcommandusedn | | | | | | | line feed | | command used exactly what has been written in the | | consol...

eMule 0.2x Client - OP_SERVERIDENT Heap Overflow

eMule 0.2x Client - OPSERVERIDENT Heap Overflow // source: https://www.securityfocus.com/bid/8440/info eMule client has been reported prone to a heap overflow vulnerability. The issue presents itself when the client parses malicious data received from the server. This issue may allow an attacker ...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (2)

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 2 source: https://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the clie...

Multiple Buffer Overflows in IglooFTP PRO

Multiple Buffer Overflows in IglooFTP PRO Url: http://www.iglooftp.com IglooFTP PRO is an extremely powerful, easy to use and well designed FTP client. Perhaps my personal favourite. It is extremely easy to use, but doesn't lack the configurability needed for advanced users. It it this award...

seti@home remotely exploitable buffer overflow

The seti@home client contains a buffer overflow in the HTTP response handler. A malicious, spoofed seti@home server can exploit this buffer overflow to cause remote code execution on the client. Exploit programs are widely available...

moxftp 2.2 - Banner Parsing Buffer Overflow

moxftp 2.2 - Banner Parsing Buffer Overflow source: https://www.securityfocus.com/bid/6921/info A buffer overflow vulnerability has been reported for moxftp. The vulnerability occurs when moxftp is parsing 'Welcome' banner messages from remote FTP servers. When moxftp receives an overly long FTP...

DEBIAN-CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

Apache Httpd < 1.3.27 : Buffer overflows in ab utility

Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server...

Trillian 0.74 - IRC PART Message Denial of Service

Trillian 0.74 - IRC PART Message Denial of Service // source: https://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel o...

Trillian 0.74 - IRC Raw Messages Denial of Service

// source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited by a malicious server. / Trillian-Dos.c Author: Lan...

Trillian 0.74 - IRC Oversized Data Block Buffer Overflow

// source: https://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious server may exploit this condition to cause a denial of...

CVE-2002-0913

Format string vulnerability in logdoit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response...

Trillian 0.x IRC Module - Remote Buffer Overflow

Trillian 0.x IRC Module - Remote Buffer Overflow source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious...

SecureCRT 2.43.x4.0 - SSH1 Identifier String Buffer Overflow (1)

SecureCRT 2.43.x4.0 - SSH1 Identifier String Buffer Overflow 1 // source: https://www.securityfocus.com/bid/5287/info The SecureCRT client is prone to a buffer-overflow condition when attempting to handle an overly long SSH1 protocol identifier string. Reportedly, an attacker can exploit this iss...

SecureCRT 2.4/3.x/4.0 - SSH1 Identifier String Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/5287/info The SecureCRT client is prone to a buffer-overflow condition when attempting to handle an overly long SSH1 protocol identifier string. Reportedly, an attacker can exploit this issue via a malicious server. Exploiting this issue may allow an...

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow

// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...

SRT Security Advisory &#40;SRT2002-06-04-1011&#41;: slurp

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-04-1011 Topic : Slurp news retriever remote format string vulnerability Date : June 04, 2002 Credit : zillionatsafemode.org Site : http://www.snosoft.com...

Matu FTP 1.74 - Client Buffer Overflow

source: https://www.securityfocus.com/bid/4572/info An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a Matu FTP client. If,upon user connection, a FTP server '220' response is of excessive length, a stack-based overflow condition could occur. Th...

CVE-2001-1056

IRC DCC helper in the ipmasqirc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid...

Apple QuickTime 5.0 - Content-Type Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/4064/info Apple QuickTime is a freely available media player. It runs on a number of platforms including MacOS and Windows 9x/ME/NT/2000/XP operating systems. Apple QuickTime For Windows does not perform sufficient bounds checking of the "Content-Type"...