CVE-2004-1214

CVE-2004-1214 describes a format string vulnerability in Kreed 1.05 and earlier. The flaw allows remote attackers to execute arbitrary code via format specifiers in either a user’s nickname or their message text. The vulnerability is identified in multiple sources (NVD/CVE databases) with a high ...

CVE-2004-1216

CVE-2004-1216 affects Kreed 1.05 and earlier: the scripts that handle players may allow remote attackers to trigger a denial of service by sending a long nickname or model type, causing server-generated dialog boxes that must be manually handled before the game continues (CVSSv2: AV:N/AC:L/Au:N/C...

CVE-2004-1215

Kreed 1.05 and earlier is affected by CVE-2004-1215, where remote attackers can cause a denial of service (server disconnect) by sending a long UDP packet that triggers a "message too long" socket error. The public records identify the affected software and the exact failure condition, but they d...