81 matches found
Mozilla Products 'select()' DoS Vulnerability - Linux
Mozilla Firefox/Seamonkey/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-2535
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...
CVE-2009-2535
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...
CVE-2009-2535
CVE-2009-2535 affects Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird, enabling remote attackers to trigger memory consumption and a crash (DoS) by supplying a large integer as the length property of a Select element. Root cause and exploit details are not expande...
CVE-2009-2535
creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9160...
FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
CVE-2008-2535
Phoenix View CMS (Pre Alpha2 and earlier) contains multiple SQL injection vulnerabilities in the admin module. The issue arises via the del parameter in five files: gbuch.admin.php, links.admin.php, menue.admin.php, news.admin.php, and todo.admin.php, allowing remote attackers to execute arbitrar...
CVE-2008-2535
creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5578...
CVE-2007-2535
WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...
CVE-2007-2535
CVE-2007-2535 affects WinAce. A ZOO archive containing a direntry that points to a previous file can cause a remote denial-of-service via an infinite loop. The available documents confirm the vulnerability is a DoS condition with no public details on exploit vectors, affected versions, or fixes. ...
FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)
Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...
ISC BIND多个拒绝服务漏洞
BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND的实现上存在多个拒绝服务漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 BIND在处理SIG查询时存在断言错误。如果返回了多于一个的SIGcovered RRset的话，就会导致递归服务器崩溃；或者对于权威服务器，如果名称服务器服务于RFC 2535 DNSSEC区且被查询了有多个SIGcovered RRset的SIG记录（如zone apex），则在创建响应的时候也会触发类似的错误。...
bind9 -- Denial of Service in named(8)
Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...
CVE-2006-2535
CVE-2006-2535 affects the Destiney Links Script 2.1.2. The vulnerable component is index.php, where an invalid show parameter referencing a non-existent file leads to an error message that reveals the installation path. The notes suggest this could be related to a broader directory traversal issu...
BrightStor ARCserve Backup discovery service buffer overflow
Added: 04/19/2006 CVE: CVE-2005-2535 BID: 12536 OSVDB: 13814 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow in the discovery service allows remote attackers to execute arbitrary commands...
BrightStor ARCserve Backup discovery service buffer overflow
Added: 04/19/2006 CVE: CVE-2005-2535 BID: 12536 OSVDB: 13814 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow in the discovery service allows remote attackers to execute arbitrary commands...
CVE-2004-2535
The CVE refers to Sticker prior to version 3.1.0 beta 2, where the person‑to‑person secure messaging feature is vulnerable. The underlying issue allows remote attackers to post messages to unauthorized private groups by abusing the group’s public encryption key, resulting in partial impact to int...
CVE-2005-2535
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260...
CVE-2005-2535
CVE-2005-2535 is a buffer overflow in the CA BrightStor ARCserve Backup Discovery Service (versions 9.0–11.1) that allows remote attackers to execute arbitrary commands via a large packet sent to TCP port 41523. The Connected documents confirm exploit context via public PoCs and Metasploit/Exploi...