Поиск:Автор - компьютерная безопасность: уязвимости и эксплоиты

[RU] switch to
English Version

См. так же
Luigi Auriemma <aluigi_(at)_altervista.org>
Luigi Auriemma <aluigi_(at)_autistici.org>
Имя: Luigi Auriemma
URL: http://aluigi.org /
E-mail: aluigi_(at)_autistici.org

Directory traversal in the webadmin of Unreal Tournament 3 1.3
Clients format strings in the Unreal engine
Server termination in the Unreal engine 3
NULL pointer in Ventrilo 3.0.2
Endless loop and resources consumption in Halo 1.0.7.0615
Server termination in America's Army 2.8.3.1
Memory corruption and NULL pointer in Unreal Tournament III 1.2
NULL pointer in Unreal Tournament 2004 v3369
NULL pointer in ZDaemon 1.08.07
Endless loop in Soldner 33724
Endless loop in Halo 1.07
Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006
Double Denial of Service in Call of Duty 4 1.6
NULL pointer in World in Conflict 1.008
NULL pointer in the HTTP/XML-RPC service of Crysis 1.21
Server freezed in Skulltag 0.97d2-RC2
Denial of Service in S.T.A.L.K.E.R. 1.0006
Denial of Service in Call of Duty 4 1.5
Re: Multiple vulnerabilities in HP OpenView NNM 7.53
Multiple vulnerabilities in HP OpenView NNM 7.53
Directory traversal in LANDesk Management Suite 8.80.1.1
Directory traversal in 2X ThinClientServer v5.0_sp1-r3497
Multiple vulnerabilities in solidDB 06.00.1018
Buffer-overflow in ASUS Remote Console 2.0.0.24
Multiple heap overflows in xine-lib 1.1.11
VLC highlander bug
Multiple vulnerabilities in Net Inspector 6.5.0.828
Buffer-overflow in BootManage TFTPD 1.99
Vulnerabilities in Timbuktu Pro 8.6.5
Invalid memory access in Acronis True Image Group Server 1.5.19.191
NULL pointer in Remotely Anywhere 8.0.668
Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)
NULL pointer in Acronis True Image Windows Agent 1.0.0.54
Directory traversal in Argon Client Management Services 1.31
Denial of Service in PacketTrap TFTP server 2.0.3901.0
Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076
Multiple vulnerabilities in ASG-Sentry 7.0.0
Directory traversal in MicroWorld eScan Server 9.0.742.98
Multiple vulnerabilities in Perforce Server 2007.3/143793
Arbitrary commands execution in Versant Object Database 7.0.1.3
Multiple integer overflows in Borland StarTeam server 10.0.0.57
Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products
Format string and buffer-overflow in SurgeMail 38k4
NULL pointer in SurgeFTP 2.3a2
Multiple vulnerabilities in Double-Take 5.0.0.2865
Heap overflow in Sybase MobiLink 10.0.1.3629
NULL pointer crash in freeSSHd 1.20
Multiple buffer-overflow in NowSMS v2007.06.27
Two heap overflow in Foxit WAC Server 2.0 Build 3503
Access violation and limited informations disclosure in webcamXP 3.72.440.0
Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11
Directory traversal and DoS in WinIPDS G52-33-021
Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15
Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x
Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105
NULL byte writing in Emerald, RadiusNT/X and Air Marshal
Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
Chat vulnerabilities in TinTin++ 1.97.9
Logs visualization in WS_FTP Server Manager 6.1.0.0
Multiple vulnerabilities in SAPlpd 6.28
Socket termination in FTP Log Server 7.9.14.0
Multiple vulnerabilities in WinCom LPD Total 3.0.2.623
Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
Buffer-overflow in Quicktime Player 7.3.1.70
Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
Exception message in Seattle Lab Telnet Server 4.1.1.3758
Exception message in VanDyke VShell 3.0.3.569
Pre-auth buffer-overflow in mySQL through yaSSL
Foxit WAC Server <= 2.1.0.910 crash
Exception message in VanDyke VShell 3.0.3.569
Denial of Service in Pragma TelnetServer 7.0.4.589
Multiple vulnerabilities in yaSSL 1.7.5
Denial of Service in Pragma FortressSSH 5.0.4.293
Buffer-overflow and format string in White_Dune 0.29beta791
Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
Buffer-overflow in CoolPlayer 217
Multiple vulnerabilities in Feng 0.1.15
Buffer-overflow in Extended Module Player 2.5.1
Multiple vulnerabilities in libnemesi 0.6.4-rc1
Update: Clients buffer-overflow in Live for Speed 0.5X10
Unicode buffer-overflow in Zoom Player 6.00b2
Buffer-overflow and format string in VideoLAN VLC 0.8.6d
Double directory traversal in ImgSvr 0.6.21
Buffer-overflow in WinUAE 1.4.4
Array overflow in id3lib (devel CVS)
Heap overflow in PeerCast 0.1217
Multiple vulnerabilities in BarracudaDrive 3.7.2
Multiple vulnerabilities in BadBlue 2.72b
Filesystem access in DOSBox 0.72
Two vulnerabilities in Simple HTTPD 1.38
Upload directory traversal in Easy File Sharing 4.5
Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146)
Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699
[Full-disclosure] Crash in LIVE555 Media Server 2007.11.01
Clients buffer-overflow in Live for Speed 0.5X10
NULL pointer crash in World in Conflict 1.000
Format string in The Dawn of Time 1.69s beta4
Multiple vulnerabilities in Dropteam 1.3.3
Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9
Unexploitable buffer-overflow in America's Army 2.8.2 through PB
Format string in F.E.A.R. 1.08 through PB
Format string in the Doom 3 engine through PB
Format string and clients disconnection in Alien Arena 2007 6.10
Multiple vulnerabilities in Doomsday 1.9.0-beta5.1
Heap overflow in Skulltag 0.97d-beta4.1
Multiple denial of service in Soldat 1.4.2/2.6.2
Buffer-overflow in the Asura engine
Multiple vulnerabilities in rFactor 1.250
Multiple vulnerabilities in Toribash 2.71
[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10
[Full-disclosure] Crash in Zoidcom 0.6.7
[Full-disclosure] Multiple vulnerabilities in Babo Violent 2 2.08.00
Details about the hlfreeze/hl-headnut/csdos bugs
Buffer-overflow in Conquest client 8.2a (svn 691)
Limited format string in Netrek 2.12.0
Players disconnection in Simbin racing games
[Full-disclosure] Multiple vulnerabilities in Winamp Web Interface 7.5.13
Multiple buffer-overflows in libmusicbrainz 2.1.2
Multiple buffer-overflows in AlsaPlayer 0.99.76
Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8
DConnect Daemon Multiple Vulnerabilities
Festalon Heap Corruption
Multiple vulnerabilities in Open Cubic Player 2.6.0pre6 / 0.1.10_rc5
Heap overflow in the GT2 loader of libmikmod 3.2.2
Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127)
Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)
Buffer-overflow in the XM loader of Cheese Tracker 0.9.9
Multiple vulnerabilities in UFO2000 svn 1057
Possible code execution in Kaillera 0.86
Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006)
Format string bug in Sparklet 0.9.4try3
Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)
[Full-disclosure] Client buffer-overflow in Quake 3 engine (1.32c / rev 795)
Server termination in netPanzer 0.8 (rev 952)
Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)
Two heap overflow in libextractor 0.5.13 (rev 2832)
[Full-disclosure] Multiple vulnerabilities in Outgun 1.0.3 bot 2
[Full-disclosure] Multiple vulnerabilities in Raydium rev 309
[Full-disclosure] Server crash in Empire 4.3.2
[Full-disclosure] Socket unreachable in GNUnet rev 2780
[Full-disclosure] Buffer-overflow and NULL pointer crash in Genecys 0.2
[Full-disclosure] Denial of service bugs in OpenTTD 0.4.7
[Full-disclosure] Format string bug in Skulltag 0.96f
[Full-disclosure] Buffer-overflow and crash in Fenice OMS 1.10
Buffer-overflow in Ultr@VNC 1.0.1 viewer and server
[Full-disclosure] Format string in Doomsday 1.8.6
Buffer-overflow and in-game crash in Zdaemon 1.08.01
Multiple vulnerabilities in csDoom 0.7
Socket unreachable and decompression buffer-overflow in Vavoom 1.19.1
[Full-disclosure] Multiple vulnerabilities in ENet library (Jul 2005)
Multiple vulnerabilities in Liero Xtreme 0.62b
Multiple vulnerabilities in Sauerbraten engine 2006_02_28
Multiple vulnerabilities in Cube engine 2005_08_29
Out of memory crash in Freeciv 2.0.7
[Full-disclosure] Multiple vulnerabilities in Alien Arena 2006 GE 5.00
[Full-disclosure] Soldier of Fortune II format string through PunkBuster 1.180
Buffer-overflow and crash in FlatFrag 0.3
Socket termination in Battle Carry .005
[Full-disclosure] Limited directory traversal in NeroNET 1.2.0.2
[Full-disclosure] Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0
[Full-disclosure] Buffer-overflow in GO-Global for Windows 3.1.0.3270
[Full-disclosure] Buffer-overflow in Glider collect'n kill 1.0.0.0
Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100
[Full-disclosure] Server crash and motd deletion in MultiTheftAuto 0.5 patch 1
[Full-disclosure] Multiple vulnerabilities in BFCommand & Control for Battlefield 1942 and Vietnam
[Full-disclosure] Server crash in Ventrilo 2.3.0
[Full-disclosure] Buffer-overflow in Chris Moneymaker's World Poker Championship 1.0
Broadcast format string and buffer-overflow in Race Driver 1.20
Endless loop in NetPanzer 0.8
In-game /ignore crash in Soldier of Fortune II 1.03
[Full-disclosure] Crash in Stronghold 2 1.2
Buffer-overflow in C'Nedra 0.4.0
Buffer-overflow and crash in Terminator 3: War of the Machines 1.16
Endless loop in Halo 1.06
Format string and crash in Warrior Kings 1.3 and Battles 1.23
Gamespy cd-key validation system: "Cd-key in use" DoS versus many games
[Full-disclosure] Crash in Zoidcom 1.0 beta 4
Clients format string and server crash in Mtp-Target 1.2.2
Multiple vulnerabilities in Yager 5.24
In-game players kicking in the Quake 3 engine
In-game server buffer-overflow in Jedi Academy 1.011
In-game server crash in Call of Duty 1.5b and United Offensive 1.51b
Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others)
[Full-Disclosure] Server termination in Scrapland 1.0
In-game cl_guid crash in Soldier of Fortune II 1.03
Multiple vulnerabilities in TrackerCam 5.12
Infostring crash and shutdown in the Quake 3 engine
[Full-Disclosure] Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0
[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35
[Full-Disclosure] Broadcast crash in Xpand Rally 1.0.0.0
Local buffer-overflow in W32Dasm 8.93
[Full-Disclosure] Arbitrary files overwriting through skins in DivX Player 2.6
Server crash in Breed patch #1
Socket unreacheable in Amp II engine
Socket termination, format string and XSS in Soldner Secret Wars 30830
Socket unreacheable in the Lithtech engine (new protocol)
In-game buffer-overflow in the Gamespy cd-key validation SDK
Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2
Multiple vulnerabilities in Kreed 1.05
Buffer-overflow in Orbz 2.10
Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4
[Full-Disclosure] Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)
Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11
Broadcast memory corruption in Soldier of Fortune II 1.03
Broadcast client crash in Halo 1.05
Multiple vulnerabilities in Hired Team: Trial (Shine engine)
[Full-Disclosure] Format string bug in Army Men RTS
Resources consumption in 602 Lan Suite 2004.0.04.0909
In-game format string bug in the Lithtech engine
Crashs in Master of Orion III 1.2.5
Broadcast crash in Vypress Tonecast 1.3
Buffer-overflow in Age of Sail II 1.04.151
Directory traversal in Yak! 2.1.2
Buffer-overflow in ShixxNOTE 6.net
Server crash in Flash Messaging 5.2.0g
Directory traversal in Tridcomm 1.3
In-game format string in Judge Dredd vs. Death 1.01
Broadcast buffer-overflow in Vypress Messenger 3.5.1
Code execution in Icecast 2.0.1
Crash in Alpha Black Zero 1.04
CoD United Offensive boom boom
Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004)
Multiple vulnerabilities in ActivePost Standard 3.1
Buffer overflow in Zinf 2.2.1 for Win32
[Full-Disclosure] Freeze in Pigeon Server 3.02.0143
Off-by-one bug in Halo 1.04
Broadcast forced exit in Ground Control II 1.0.0.7
Limited buffer overflow in Painkiller 1.31
Medal of Honor remote buffer-overflow
Remote crash of Half-Life servers and clients (versions before the 07 July 2004)
[Full-Disclosure] Code execution in the Unreal Engine through \secure\ packet