CVE-2004-2644

Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...

USN-19-1: squid vulnerabilities

Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...

ASN.1 compiler multiple bugs

No description provided...

[SA12794] The ASN.1 Compiler Unspecified Security Issues

TITLE: The ASN.1 Compiler Unspecified Security Issues SECUNIA ADVISORY ID: SA12794 VERIFY ADVISORY: http://secunia.com/advisories/12794/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: The ASN.1 Compiler 0.x http://secunia.com/product/4038/ DESCRIPTION: Two security...

squid SNMP DoS

ASN.1 parsing problems...

Squid < 2.5.STABLE7 SNMP ASN.1 Parser Remote DoS

Binary data 2363.prm...

Debian DSA-130-1 : ethereal - remotely triggered memory allocation error

Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal. This vulnerability was announced in the ethereal security advisory enpa-sa-00003. This issue has...

Debian DSA-111-1 : ucd-snmp - remote exploit

The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...

Debian DSA-394-1 : openssl095 - ASN.1 parsing vulnerability

Steve Henson of the OpenSSL core team identified and prepared fixes for a number of vulnerabilities in the OpenSSL ASN1 code that were discovered after running a test suite by British National Infrastructure Security Coordination Centre NISCC. A bug in OpenSSLs SSL/TLS protocol was also identifie...

CVE-2004-0699

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data...

CVE-2004-0642

Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...

CVE-2004-0642

Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...

CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

CVE-2004-0699

CVE-2004-0699 describes a heap-based buffer overflow in the ASN.1 decoding library used by Check Point VPN-1 products when Aggressive Mode IKE is enabled. The root cause is a vulnerability in ASN.1 decoding that can be triggered by sending a malformed IKE packet after initiating a negotiation, al...

GLSA-200409-16 : Samba: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-16 Samba: Denial of Service vulnerabilities There is a defect in smbd's ASN.1 parsing. A bad packet received during the authentication request could throw newly-spawned smbd processes into an infinite loop CAN-2004-0807...

Samba < 3.0.7 Multiple Remote DoS

The remote Samba server, according to its version number, is vulnerable to a denial of service. There is a bug in the remote smbd ASN.1 parsing that could allow an attacker to cause a denial of service attack against the remote host by sending a specially crafted ASN.1 packet during the...

CVE-2004-0642

MIT Kerberos 5 (krb5) is affected by CVE-2004-0642 due to double-free vulnerabilities in the ASN.1 decoder error handling for both the KDC library and the krb5 client library (versions 1.3.4 and earlier). The issue can allow remote attackers to execute arbitrary code, potentially compromising the...

CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...