CVE-2008-6560

CVE-2008-6560 affects CMAN (Cluster Manager) before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux 5. The issue is a buffer overflow in CMAN triggered by a cluster.conf file with many lines, leading to a denial of service via CPU consumption and memory corruption. The public records do not pr...

CVE-2008-6560

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service CPU consumption and memory corruption via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege...

Mandrake Security Advisory MDVSA-2009:076 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:076. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Update for httpd RHSA-2008:0967-01

Check for the Version of httpd OpenVAS Vulnerability Test RedHat Update for httpd RHSA-2008:0967-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2009-0769

CVE-2009-0769 affects QIP 2005 build 8082 and is a DoS via a crafted RTF ICQ message, causing CPU consumption and application hang. The description notes a possible involvement of Sergey Tkachenko TRichView, and states it may not be a vulnerability in QIP if TRichView is the real component. The c...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0747

The ext4isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the isizehigh structure member during operations on arbitrary types of files, which allows local users to cause a denial of service CPU consumption and error-message flood by...

CVE-2009-0747

The CVE-2009-0747 issue affects the Linux kernel’s ext4_isize helper in fs/ext4/ext4.h, exposing a denial-of-service risk when a local user mounts a crafted ext4 filesystem. The vulnerability arises from using the i_size_high structure member during operations on arbitrary file types, potentially...

CVE-2009-0747

The ext4isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the isizehigh structure member during operations on arbitrary types of files, which allows local users to cause a denial of service CPU consumption and error-message flood by...

CentOS Update for httpd CESA-2008:0967 centos4 i386

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2008:0967 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for httpd CESA-2008:0967 centos3 i386

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2008:0967 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2002-2430

GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service CPU consumption by performing a socket disconnect to terminate a request before it has been fully processed by the server...

CVE-2002-2430

CVE-2002-2430 affects GoAhead WebServer prior to version 2.1.1. The vulnerability is a denial of service caused by remote-triggered socket disconnects that terminate a request before it has been fully processed, leading to increased CPU usage. The available documents identify the affected product...

Command injection

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service CPU consumption via the SITE WHO command...

CVE-2008-6082

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service CPU consumption via the SITE WHO command...

CVE-2008-6082

Titan FTP Server 6.26.630 is affected by CVE-2008-6082: a denial-of-service vulnerability triggered by the SITE WHO command due to an error in SITE WHO processing, which can exhaust CPU resources. The vulnerability is reported for Titan FTP Server builds around 6.26.630/6.26.631; mitigation is a ...

CVE-2008-5715

Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service application crash via JavaScript code with a long string value for the hash property aka location.hash. NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU...

Code injection

Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service application crash via JavaScript code with a long string value for the hash property aka location.hash. NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU...

GLSA-200812-17 : Ruby: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-17 Ruby: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Ruby interpreter and its standard libraries. Drew Yao of Apple Product Security discovered the following flaws: Arbitrary code execution...