CVE-2004-2583

SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous open connections to TCP port 25...

CVE-2004-2647

Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...

CVE-2004-1142

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service CPU consumption via a certain malformed SMB packet...

CVE-2004-1142

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service CPU consumption via a certain malformed SMB packet...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

CVE-2004-0295

TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service CPU consumption via an open idle connection...

CVE-2004-0252

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

CVE-2004-0298

CesarFTP 0.99e allows remote attackers to cause a denial of service CPU consumption via a long RETR parameter...

CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte newline is sent, which allows local users to cause a denial of service CPU consumption by continuing to send a long command that does not contain a newline...

CVE-2004-0983

The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service infinite loop and CPU consumption via a certain HTTP request...

CVE-2004-0930

CVE-2004-0930 affects Samba 3.0.4, 3.0.7 (and possibly other versions). The issue is in the ms_fnmatch function, allowing remote authenticated users to cause high CPU denial of service via a SAMBA request containing multiple asterisks (*) in the wildcard pattern. The provided documents confirm th...

DSA-586-1 ruby - infinite loop

Bulletin has no description...

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...

libwmf -- multiple vulnerabilities

Mitre reports: Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than...

CVE-2004-1688

Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a long login name sent to port 3103...

CVE-2001-1055

The Microsoft Windows network stack allows remote attackers to cause a denial of service CPU consumption via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke...

CVE-2000-1203

Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service CPU consumption by forging an email message with the sender as [email protected] localhost, which causes Domino to enter a mail loop...

CVE-2002-1109

Summary: CVE-2002-1109 affects securetar (used in AMaViS shell script 0.2.1 and earlier). Vulnerability: processing a malformed TAR file (potentially via an incorrect file size parameter) can cause CPU consumption. Impact: denial of service (CPU load) and partial availability impact as indicated....

[NT] Cerbere Proxy Server Host DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...