World in Conflict GetMagicNumberString函数远程拒绝服务漏洞

BUGTRAQ ID: 25985 World in Conflict是Massive娱乐公司开发的一款RTS即时战略游戏。 World in Conflict处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器程序崩溃。 World in Conflict游戏服务器的GetMagicNumberString函数在VOIP端口52999上获得从客户端接受到数据的第三个字节，如果这个值有效的话就返回文本字符串，如果无效的话返回NULL，然后该函数的返回的字符串会与另一个字符串做比较，这里会出现空指针访问，导致服务器崩溃。 Massive Entertainment World i...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The CVE concerns Massive Entertainment’s World in Conflict (version 1.000 and earlier). The vulnerability stems from the GetMagicNumberString function, where processing a crafted string sent to the VoIP port 52999/tcp can trigger a NULL dereference and cause a daemon crash, resulting in a denial ...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

DEBIAN-CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞

BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...

Unfixed XSS vulnerability at www.worldvitalrecords.com

Security researcher Uber0n, has submitted on 08/11/2007 a cross-site-scripting XSS vulnerability affecting www.worldvitalrecords.com, which at the time of submission ranked 86657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...

DSA-1317-1 tinymux

Bulletin has no description...

Unfixed XSS vulnerability at www.worldwebsitedirectory.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.worldwebsitedirectory.com, which at the time of submission ranked 804797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. ...

The United States Blizzard[World Of Warcraft] official program vulnerability-vulnerability warning-the black bar safety net

Battle.net clan management system using a MySQL backend, allowing users to easily upgrade and maintain the web site. System to achieve on exist input validation vulnerability, a remote attacker could use this vulnerability to executeSQL injectionattacks, unauthorized access to system administrati...

Scorp Book 1.0 (smilies.php config) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Scorp Book 1.0 smilies.php config Remote File Inclusion Vulnerability ======================================================================= !/usr/bin/perl .-""""""""...

WebLog - index.php Remote File Disclosure

WebLog - index.php Remote File Disclosure .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : weblog Download : http://www.holtstraeter.com/cybercheffe/pages/websoft.php?action=websoftpagefive Author : Dj7xpl |...

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged loc...

EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability

No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: "Powered by EQdkp" Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...

clipboard bug.txt

The clipboard in QNX is world readable and writable. Although the folder containing the file is not readable for normal users the filename convention is predictable, see "clipboard bug.jpg" bash-2.05a$ ls -l /var/clipboard/muh/00000000/TTSHEOAA552983 -rw-rw-rw- 1 root root 78 Jan 04 16:27...

Multiple QNX security vulnerabilites

Unprivileged user can debug suid applications. Clipboard is world accessible...

ebp2x-rfi.txt

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...