CVE-2006-3792

SQL injection vulnerability in ServerClientUfo::recvpacket in serverprotocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.cstr function...

CVE-2006-3792

UFO2000 is affected by CVE-2006-3792, with a SQL injection in ServerClientUfo::recv_packet (server_protocol.cpp) that allows remote execution of arbitrary SQL commands via unspecified vectors in svn 1057. Public advisories (Gentoo GLSA 200702-10) confirm multiple vulnerabilities including this SQ...

CVE-2006-2971

Integer overflow in the recvpacket function in 0verkill 0.16 allows remote attackers to cause a denial of service daemon crash via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function...