Update: Clients buffer-overflow in Live for Speed 0.5X10

New patch, old bug. The Y patch has been released a couple of days ago but the lfscbof buffer-overflow vulnerability is still there, so any player can crash the others using the same old proof-of-concept I released two months and half ago: http://aluigi.org/adv/lfscbof-adv.txt...

Live for Speed game buffer overflow

Buffer overflow on skin file parsing...

CuteNews <= 1.4.5 Admin Password md5 Hash Fetching Exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // Cutenews = 1.4.5 admin password md5 hash fetching exploit // Version 1.0 // written by Jan...

CuteNews <= 1.4.5 Admin Password md5 Hash Fetching Exploit

Exploit for unknown platform in category web applications ========================================================== CuteNews = 1.4.5 Admin Password md5 Hash Fetching Exploit ========================================================== ?php errorreportingEALL;...

iMesh 7.1.0.x - 'IMWeb.dll 7.0.0.x' Remote Heap Overflow

!-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com "iMesh is a file sharing and online social network. It uses a proprietary, centralized, P2P protocol. iMesh is owned ...

[SECURITY] Fedora 8 Update: Thunar-0.9.0-2.fc8

Thunar is a new modern file manager for the Xfce Desktop Environment. It has been designed from the ground up to be fast and easy-to-use. Its user interface is clean and intuitive, and does not include any confusing or useless options. Thunar is fast and responsive with a good start up time and...

Stack overflow

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

CVE-2007-5464

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

CVE-2007-5464

Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service client crash and possibly execute arbitrary code via a long skin name...

CVE-2007-5464

CVE-2007-5464 describes a stack-based buffer overflow in Live for Speed 0.5X10 and earlier. The vulnerability allows remote authenticated users to crash the client and potentially execute arbitrary code via a long skin name. Affected component is the client’s handling of skin names; root cause is...

Clients buffer-overflow in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bug: client buffer-overflow during skins handling Exploitation: remote, versus clients the attacker can be a malicious client or the same server Date: 13 Oct 2007 Author: Luigi Auriemma e-mail:...

Live for Speed皮肤名称远程栈溢出漏洞

BUGTRAQ ID: 26066 Live for Speed是一款流行的赛车游戏。 Live for Speed的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制其他游戏客户端。 Live for Speed允许玩家使用不同的汽车外观皮肤。当玩家加入到服务器确定进入赛道后，客户端会向服务器发送一个包含有所有赛车信息（包括设置、颜色、皮肤等）的报文，其中包含有皮肤名称的字段为16字节，其他客户端没有执行正确检查便读取了这个字段并连接到赛车名称后以便从本地皮肤文件夹中加载所需的DDS文件，导致栈溢出。 Live for Speed Live for Speed = 0.5X10...

Live for Speed - Skin Name Buffer Overflow

Live for Speed - Skin Name Buffer Overflow source: https://www.securityfocus.com/bid/26066/info Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker c...

Live for Speed - Skin Name Buffer Overflow

source: https://www.securityfocus.com/bid/26066/info Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary...

[SECURITY] Fedora Core 6 Update: elinks-0.11.3-1.fc6

Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage over graphical browsers is its speed--Links starts and exits quickly and swiftly displays Web pages...

High-speed crack winzip password-uzpc3. 0-vulnerability warning-the black bar safety net

Often on TV, newspaper, or even on the web ever heard of the hacker's name. They are elusive, depending on a variety of network security measures as nothing, any obstacle, any password for them just a piece of cake. The author ask himself no matter if those hackers did with writing their own tool...

[slackware-security] pidgin

A new pidgin package is available for Slackware 12.0 to fix a minor fix security issue. More details about this issue may be found here: http://www.pidgin.im/news/security/?id=23 Here are the details from the Slackware 12.0 ChangeLog: patches/packages/pidgin-2.2.1-i486-1slack12.0.tgz: Upgraded to...

Fedora Core 6 : cups-1.2.12-4.fc6 (2007-644)

This update fixes a security issue concerning PDF handling. It also fixes printing speed with USB printers, and includes a fix for the LSPP support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

CVE-2007-4425

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...