Approved changes feed: RSS · Atom

cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUfo2000 (1e99aad9-8d92-51ee-b547-06598548aa3b)
ProductUfo2000 (0cd1f657-5a62-57d8-8145-1c3d64acd1e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ufo2000/ufo2000 purl2cpe 2026-06-01 10:13:14.618955
pkg:sourceforge/ufo2000 purl2cpe 2026-06-01 10:13:14.618957

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3792 vulnerable 2026-06-08 04:49:10.204076 Details available
SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.c_str function.
Published: 2006-07-21T21:00:00.000Z
Updated: 2024-08-07T18:39:54.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3791 vulnerable 2026-06-08 04:49:10.203721 Details available
The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory.
Published: 2006-07-21T21:00:00.000Z
Updated: 2024-08-07T18:39:54.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3790 vulnerable 2026-06-08 04:49:10.203361 Details available
The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read.
Published: 2006-07-21T21:00:00.000Z
Updated: 2024-08-07T18:39:54.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3789 vulnerable 2026-06-08 04:49:10.202979 Details available
Multiple array index errors in the (1) recv_rules, (2) recv_select_unit, (3) recv_options, and (4) recv_unit_data functions in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code and cause a denial of service (opponent crash) via certain packet data that specifies an out-of-bounds index.
Published: 2006-07-21T21:00:00.000Z
Updated: 2024-08-07T18:39:54.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3788 vulnerable 2026-06-08 04:49:10.202507 Details available
Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via (1) a long unit name in Net::recv_add_unit,; (2) large values to Net::recv_rules, Net::recv_select_unit, Net::recv_options, and Net::recv_unit_data; and (3) a large mapdata GEODATA structure in Net::recv_map_data.
Published: 2006-07-21T21:00:00.000Z
Updated: 2024-08-07T18:39:54.085Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.