92 matches found
kernel: unlimited socket backlog DoS
The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the skaddbacklog function and the skrmemalloc...
CVE-2009-4251
creationtimestamp| type| source ---|---|--- 2009-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10298...
Debian Security Advisory DSA 1211-1 (pdns)
The remote host is missing an update to pdns announced via advisory DSA 1211-1. It was discovered that malformed TCP packets may lead to denial of service and possibly the execution of arbitrary code if the PowerDNS nameserver acts as a recursive nameserver. OpenVAS Vulnerability Test $Id:...
openSUSE 10 Security Update : pdns (pdns-2275)
Two security problems that have been found in PowerDNS are fixed by this update : CVE-2006-4251: The PowerDNS Recursor can be made to crash by sending malformed questions to it over TCP potentially executing code. CVE-2006-4252: Zero second CNAME TTLs can make PowerDNS exhaust allocated stack...
CVE-2007-4251
CVE-2007-4251 involves OpenOffice.org (OOo) 2.2 and a vulnerability in how it handles files with multiple extensions. The underlying issue allows user-assisted remote attackers to cause a denial of service, compromising availability (listed as partial impact). The existing records identify this a...
CVE-2007-4251
OpenOffice.org OOo 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service...
Debian DSA-1211-1 : pdns - buffer overflow
It was discovered that malformed TCP packets may lead to denial of service and possibly the execution of arbitrary code if the PowerDNS nameserver acts as a recursive nameserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1211-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 14th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4251
PowerDNS Recursor 3.1.3 and earlier are affected by CVE-2006-4251 due to a buffer overflow in handling TCP DNS queries, potentially allowing remote code execution. Mitigation observed in connected docs: upgrade to pdns-recursor 3.1.4 or later (e.g., Debian/DSA-1211-1 and SUSE/SUSES-SA:2006:070 de...
CVE-2006-4251
Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length...
CVE-2005-4251
CVE-2005-4251 affects mcGallery PRO 2.2 and earlier, with multiple SQL injection flaws that allow remote execution of arbitrary SQL via parameters (id, start, rand in show.php; album in index.php). The vulnerability is documented in the NVD entry and related CVE references; base score 7.5 (High) ...
