16 results (0.008 seconds)

CVSS: 4.0EPSS: 5%CPEs: 8EXPL: 3

CVE-2008-7011 – Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service

https://notcve.org/view.php?id=CVE-2008-7011

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set. El motor de Unreal, el utilizado en Unreal Tournament v3 1.3, Unreal Tournament 2003 y 2004, Dead Man's Hand, Pariah, WarPath, Postal2, y Shadow Ops, permite a usuarios remotos autenticados producir una denegación de servicio (salida de servidor) a través de múltiples descargas de ficheros desde el servidor, lo que inicia un fallo de aserción cuando la marca (flag) de cierre en UnChan.cpp esta activado. • https://www.exploit-db.com/exploits/32386 http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html http://osvdb.org/48293 http://www.securityfocus.com/archive/1/496399/100/0/threaded http://www.securityfocus.com/bid/31205 • CWE-399: Resource Management Errors •

CVSS: 5.0EPSS: 4%CPEs: 2EXPL: 2

CVE-2008-7015 – Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service

https://notcve.org/view.php?id=CVE-2008-7015

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure. El motor de Unreal v3, utilizado en Unreal Tournament v3 1.3, Frontlines: Fuel of War v1.1.1, y otros productos, permite a atacantes remotos producir una denegación de servicio (salida del servidor) a través de un paquete con un valor de entero largo que inicia un fallo de localización de memoria. • https://www.exploit-db.com/exploits/32362 http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0189.html http://osvdb.org/48292 http://www.securityfocus.com/archive/1/496280/100/0/threaded http://www.securityfocus.com/bid/31140 https://exchange.xforce.ibmcloud.com/vulnerabilities/45095 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 3

CVE-2008-4243 – Unreal Tournament 3 1.3 - Directory Traversal

https://notcve.org/view.php?id=CVE-2008-4243

Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Vulnerabilidad de salto de directorio en ImageServer (también conocida como UTImageServer) en WebAdmin anterior a v1.7 para Epic Games Unreal Tournament 3 (UT3) v1.3, permite a atacantes remotos leer archivos de su elección a través de .."punto punto) en la URI. • https://www.exploit-db.com/exploits/6506 http://aluigi.org/adv/ut3webown-adv.txt http://secunia.com/advisories/31926 http://securityreason.com/securityalert/4317 http://ut3webadmin.elmuerte.com/download.php?t=2008-09-21 http://www.securityfocus.com/bid/31272 http://www.vupen.com/english/advisories/2008/2635 https://exchange.xforce.ibmcloud.com/vulnerabilities/45292 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 5.0EPSS: 2%CPEs: 3EXPL: 1

CVE-2008-3410

https://notcve.org/view.php?id=CVE-2008-3410

Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c. Unreal Tournament 3 1.3beta4 y anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo o caída del demonio) mediante un paquete UDP en el que el valor del tamaño de cierto campo es superior a la longitud total del paquete, también conocido como ataque 2 en ut3mendo.c. • http://aluigi.altervista.org/adv/ut3mendo-adv.txt http://aluigi.org/poc/ut3mendo.zip http://secunia.com/advisories/31265 http://www.securityfocus.com/archive/1/494929/100/0/threaded http://www.securityfocus.com/bid/30430 http://www.vupen.com/english/advisories/2008/2260/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44104 • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 18%CPEs: 3EXPL: 1

CVE-2008-3409 – Unreal Tournament 3 - Memory Corruption (Denial of Service)

https://notcve.org/view.php?id=CVE-2008-3409

Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka attack 1 in ut3mendo.c. Desbordamiento de búfer en Unreal Tournament 3 1.3beta4 y anteriores, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria o caída de demonio) o posiblemente, la ejecución de código de su elección a través de un paquete UDP que contiene un valor largo en un tamaño de campo determinado seguiro por una cadena de datos de ese tamaño. También conocido como ataque 1 en ut3mendo.c • https://www.exploit-db.com/exploits/32127 http://aluigi.altervista.org/adv/ut3mendo-adv.txt http://aluigi.org/poc/ut3mendo.zip http://secunia.com/advisories/31265 http://www.securityfocus.com/archive/1/494929/100/0/threaded http://www.securityfocus.com/bid/30430 http://www.vupen.com/english/advisories/2008/2260/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44105 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •