CVE-2006-3792

SQL injection vulnerability in ServerClientUfo::recvpacket in serverprotocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.cstr function...

CVE-2006-3789

Multiple array index errors in the 1 recvrules, 2 recvselectunit, 3 recvoptions, and 4 recvunitdata functions in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code and cause a denial of service opponent crash via certain packet data that specifies an out-of-bounds...

CVE-2006-3790

CVE-2006-3790 affects UFO2000. The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 can be manipulated via a mismatched keysize/valsize relative to the packet size, causing a buffer over-read and resulting in a denial of service (daemon termination). The vulnerability is doc...

CVE-2006-3792

UFO2000 is affected by CVE-2006-3792, with a SQL injection in ServerClientUfo::recv_packet (server_protocol.cpp) that allows remote execution of arbitrary SQL commands via unspecified vectors in svn 1057. Public advisories (Gentoo GLSA 200702-10) confirm multiple vulnerabilities including this SQ...