[SECURITY] Fedora 8 Update: Thunar-0.9.0-2.fc8

Thunar is a new modern file manager for the Xfce Desktop Environment. It has been designed from the ground up to be fast and easy-to-use. Its user interface is clean and intuitive, and does not include any confusing or useless options. Thunar is fast and responsive with a good start up time and...

CVE-2007-5464

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

Stack overflow

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

CVE-2007-5464

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

CVE-2007-5464

CVE-2007-5464 describes a stack-based buffer overflow in Live for Speed 0.5X10 and earlier. The vulnerability allows remote authenticated users to crash the client and potentially execute arbitrary code via a long skin name. Affected component is the client’s handling of skin names; root cause is...

Clients buffer-overflow in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bug: client buffer-overflow during skins handling Exploitation: remote, versus clients the attacker can be a malicious client or the same server Date: 13 Oct 2007 Author: Luigi Auriemma e-mail:...

Live for Speed皮肤名称远程栈溢出漏洞

BUGTRAQ ID: 26066 Live for Speed是一款流行的赛车游戏。 Live for Speed的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制其他游戏客户端。 Live for Speed允许玩家使用不同的汽车外观皮肤。当玩家加入到服务器确定进入赛道后，客户端会向服务器发送一个包含有所有赛车信息（包括设置、颜色、皮肤等）的报文，其中包含有皮肤名称的字段为16字节，其他客户端没有执行正确检查便读取了这个字段并连接到赛车名称后以便从本地皮肤文件夹中加载所需的DDS文件，导致栈溢出。 Live for Speed Live for Speed = 0.5X10...

Live for Speed - Skin Name Buffer Overflow

Live for Speed - Skin Name Buffer Overflow source: https://www.securityfocus.com/bid/26066/info Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker c...

Live for Speed - Skin Name Buffer Overflow

source: https://www.securityfocus.com/bid/26066/info Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary...

[SECURITY] Fedora Core 6 Update: elinks-0.11.3-1.fc6

Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage over graphical browsers is its speed--Links starts and exits quickly and swiftly displays Web pages...

High-speed crack winzip password-uzpc3. 0-vulnerability warning-the black bar safety net

Often on TV, newspaper, or even on the web ever heard of the hacker's name. They are elusive, depending on a variety of network security measures as nothing, any obstacle, any password for them just a piece of cake. The author ask himself no matter if those hackers did with writing their own tool...

[slackware-security] pidgin

A new pidgin package is available for Slackware 12.0 to fix a minor fix security issue. More details about this issue may be found here: http://www.pidgin.im/news/security/?id=23 Here are the details from the Slackware 12.0 ChangeLog: patches/packages/pidgin-2.2.1-i486-1slack12.0.tgz: Upgraded to...

Fedora Core 6 : cups-1.2.12-4.fc6 (2007-644)

This update fixes a security issue concerning PDF handling. It also fixes printing speed with USB printers, and includes a fix for the LSPP support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

CVE-2007-4425

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

CVE-2007-4426

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

Null pointer dereference

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

CVE-2007-4425

CVE-2007-4425 concerns buffer overflow vulnerabilities in Live for Speed (LFS) including the demo, S1 and S2 components. The issue arises from crafted network packets: an ID 3 packet with a long nickname field can trigger a server denial-of-service and likely remote code execution, while an ID 10...

CVE-2007-4426

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

CVE-2007-4426

CVE-2007-4426 affects Live for Speed (LFS) S1 and S2. The vulnerability enables remote denial of service (server crash) through crafted pre-login packets: (1) a 0x00 byte in a pre-login ID 3 packet triggering a NULL dereference, and (2) a pre-login ID 5 packet missing certain strings triggering a...