CVE-2006-2408: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...

CVE-2006-2409: Use of Externally-Controlled Format String

Format string vulnerability in the raydiumlog function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydiumconsolelineadd...