blogspot.txt

Blogspot.com Homepage: http://www.blogspot.com Affected files: Blog input boxes ------------------------------------------ XSS vuln via Display name input box. Blogger doesnt properally sanatize user input before generating it. For example, you can't use illegal characters in your username,or...

BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun

BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun // source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a...

BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun

// source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a game. This game is typically installed setgid games so may allow...

suid scotty / ntping overflow

here is the offending code and the attached letter has the general information for this issue. in /home/d0tslash/scotty-2.1.0/tnm/ntping/ntping.c char hname; / hostname / ... else char tmp 512; struct hostent hp; strcpy tmp, hname; ifdef HAVERES / try to spend no longer than some seconds: /...