CVE-2007-5804

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument...

Design/Logic Flaw

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...

CVE-2007-5805

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...

Code injection

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

CVE-2007-5711

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

CVE-2007-5711

The CVE-2007-5711 entry concerns Massive Entertainment’s World in Conflict (versions 1.001 and earlier). The vulnerability allows remote attackers to cause a denial-of-service (via a large packet) by targeting TCP or UDP port 48000. The provided documents do not include concrete exploitation vect...

CVE-2002-2301

Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database...

NULL pointer crash in World in Conflict 1.000

Luigi Auriemma Application: World in Conflict http://www.worldinconflict.com Versions: = 1.000 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 09 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4...

World in Conflict GetMagicNumberString函数远程拒绝服务漏洞

BUGTRAQ ID: 25985 World in Conflict是Massive娱乐公司开发的一款RTS即时战略游戏。 World in Conflict处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器程序崩溃。 World in Conflict游戏服务器的GetMagicNumberString函数在VOIP端口52999上获得从客户端接受到数据的第三个字节，如果这个值有效的话就返回文本字符串，如果无效的话返回NULL，然后该函数的返回的字符串会与另一个字符串做比较，这里会出现空指针访问，导致服务器崩溃。 Massive Entertainment World i...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The CVE concerns Massive Entertainment’s World in Conflict (version 1.000 and earlier). The vulnerability stems from the GetMagicNumberString function, where processing a crafted string sent to the VoIP port 52999/tcp can trigger a NULL dereference and cause a daemon crash, resulting in a denial ...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

DEBIAN-CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞

BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...

Unfixed XSS vulnerability at www.worldvitalrecords.com

Security researcher Uber0n, has submitted on 08/11/2007 a cross-site-scripting XSS vulnerability affecting www.worldvitalrecords.com, which at the time of submission ranked 86657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...

DSA-1317-1 tinymux

Bulletin has no description...

Unfixed XSS vulnerability at www.worldwebsitedirectory.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.worldwebsitedirectory.com, which at the time of submission ranked 804797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. ...