1988 matches found
CVE-2004-1731: Undefined Security Weakness
signuppage.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address...
Gzip Memory Bomb Denial Of Service
This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...
I2S-LAB-10-15-03.Shell32-Do.txt
I2S LAB Security Advisory http://www.I2S-LAB.com Date : 12 / 03 / 2003 Affected systems : Microsoft Windows 2000 SP4 and below Vendor : http://www.microsoft.com Issue : Attackers can turn a media directory, drive, mail, ... into a remote bomb crashing any application which would try to acces it...
xNewsletter 1.0 - Form Field Input Validation
xNewsletter 1.0 - Form Field Input Validation source: https://www.securityfocus.com/bid/4516/info xNewsletter is a script that allows web users to subscribe to a newsletter. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems...
tmpwatch: local DoS : fork()bomb as root
sent through bugzilla.redhat.com no reply from responsible person. here it goes. Local DoS in /usr/sbin/tmpwatch. root forkbombs himself. tmpwatch is a bad boy Summary Local people can stop things working, and force you to reboot. Longer summary Any user with write access to /tmp or /var/tmp ca...
CVE-1999-0103
CVE-1999-0103 is described in connected documents as a denial-of-service issue caused by UDP flood/packet storms when echo and related UDP services are used in tandem (UDP bomb). The Philips ICS advisory (ICSMA-18-233-01) links CVE-1999-0103 to Uncontrolled Resource Consumption in Philips Intelli...
CVE-1999-0103: Undefined Security Weakness
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm...
