[SA15363] War Times Nickname Handling Denial of Service Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: War Times Nickname Handling Denial of Service...

CVE-2004-1794

The CVE-2004-1794 entry describes a Cross-site Scripting (XSS) vulnerability in the VCard4J Toolkit. The issue allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. According to the available data, this is a client-side input handling weakness in VCard4J ...

CVE-2004-1794

Cross-site scripting XSS vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard...

CVE-2005-0501

Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname...

CVE-2005-1163

Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via 1 a crafted nickname or 2 a packet with a large amount of data...

DEBIAN-CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

CVE-2005-0681

CVE-2005-0681 affects Nokia Symbian S60, where a remote attacker can trigger a denial of service (phone restart) by manipulating the Bluetooth nickname. The available documents consistently describe a DoS outcome via Bluetooth nickname but do not provide concrete root-cause analysis beyond that d...

CVE-2005-0501

Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname...

Bontago Game Server 1.1 - Remote Nickname Buffer Overrun

Bontago Game Server 1.1 - Remote Nickname Buffer Overrun source: https://www.securityfocus.com/bid/12603/info The Bontago game server is reported to be affected by a remote buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on...

Bontago Game Server 1.1 - Remote Nickname Buffer Overrun

source: https://www.securityfocus.com/bid/12603/info The Bontago game server is reported to be affected by a remote buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on client-supplied 'nickname' values. It is conjectured that a...

CVE-2004-1619

CVE-2004-1619 describes a buffer overflow in Privateer’s Bounty: Age of Sail II that allows remote attackers to execute arbitrary code via a long nickname. The NVD entry confirms the impact as remote code execution with network-exposed vector, low complexity, no authentication required, and parti...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

[Full-Disclosure] Multiple vulnerabilities in Konversation

On 18 and 19 Jan 2005 I Wouter Coekaerts discovered 3 security vulnerabilities in Konversation "A user-friendly IRC-client for KDE", http://konversation.berlios.de/. Affected are version 0.15, CVS until 18-19/01/2005, and some older versions too. They are fixed in 0.15.1. Problem 1. Quick Buttons...

CVE-2004-1214

Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in 1 a nickname or 2 message text...

CVE-2004-2165

Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...

CVE-2004-1794

Cross-site scripting XSS vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard...

CVE-2004-1216

The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service server freeze via a long 1 nickname or 2 model type, which generates dialog boxes on the server that must be manually handled before the server continues the game...

CVE-2004-1619

Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname...

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service // source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the ga...

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service

// source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server. The problem is in the handling of nicknames of excessive length. I...