4212 matches found
KaZaA Media Desktop 1.7.1 - Large Message Denial of Service
// source: https://www.securityfocus.com/bid/5317/info KaZaA may consume large amounts of CPU when processing a sequence of large messages. It is possible for an attacker to flood a vulnerable system with a large number of messages, resulting in a denial of service condition. / kazaa denial of...
Icq 2001&2002 vulnerability
Icq 2001&2002 have feature, that allows to insert graphical smiles. I found, that if you send message filled with lots of smilesicq msg can be about 7000 bytes long, then target icq hangs for 10-20 seconds, consuming all CPU time, or simply crashs. It seems for me that such type of message crashs...
CVE-2002-0318
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service CPU consumption via a flood of Access-Request packets...
CVE-2002-0368
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service CPU consumption via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."...
PT-2002-1457 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.9.3 Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a malformed packet. This packet causes the DNS dissector in Ethereal to enter an infinite...
CVE-2002-0291
Dino's Webserver 1.2 allows remote attackers to cause a denial of service CPU consumption and possibly execute arbitrary code via several large HTTP requests within a short time...
CVE-2002-0283
Windows XP with port 445 open allows remote attackers to cause a denial of service CPU consumption via a flood of TCP SYN packets containing possibly malformed data...
CVE-2002-0291
Dino's Webserver 1.2 allows remote attackers to cause a denial of service CPU consumption and possibly execute arbitrary code via several large HTTP requests within a short time...
psydos.txt
psyBNC 2.3 DoS / bug :: Description psyBNC http://www.psychoid.lam3rz.de/psybnc.html has a problem dealing with oversized passwords, making it possible to tie up all the connection slots and consume alot of CPU on the server. :: Exploit Create a program to do the following: 1. connect to the psyB...
Microsoft Outlook Express 5.5 - Denial of Service Device Denial of Service
source: https://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages. Modifying the BGSOUND or IFRAME tag to contain a URL pointing to a DOS device,...
Microsoft Outlook Express 5.5 - Denial of Service Device Denial of Service
Microsoft Outlook Express 5.5 - Denial of Service Device Denial of Service source: https://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages...
CVE-2001-1156
CVE-2001-1156 affects TypSoft FTP Server 0.95. A remote attacker can cause a denial-of-service (CPU consumption) by sending a malformed path like ../../* to STOR or RETR. Public sources (OpenVAS/Nessus) describe the DoS condition; no exploitation specifics or fix details are provided in the conne...
CVE-2001-1184: Undefined Security Weakness
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service CPU consumption via 1 in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and 2 in 2.21.0...
CVE-2001-1156: Undefined Security Weakness
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service CPU consumption via a "../../" argument to 1 STOR or 2 RETR...
CVE-2001-0965
glFTPD 1.23 allows remote attackers to cause a denial of service CPU consumption via a LIST command with an argument that contains a large number of asterisk characters...
CVE-2001-0666
Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...
CVE-2001-0965
Affected software: glFTPD 1.23. The issue is a remote denial-of-service via the LIST command when the argument contains a large number of * characters, causing CPU consumption. The connected documents provide the same vulnerability description across multiple sources, but do not include a confirm...
CVE-2001-0965: Undefined Security Weakness
glFTPD 1.23 allows remote attackers to cause a denial of service CPU consumption via a LIST command with an argument that contains a large number of asterisk characters...
CVE-2001-0666: Uncontrolled Resource Consumption
Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...