Code injection

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 are affected by CVE-2012-0770 due to a flaw in how hash values are computed for form parameters, allowing remote attackers to trigger hash collisions and cause a denial of service (CPU consumption) with crafted requests. Remediation is available via the...

Gentoo Security Advisory GLSA 201203-04 (libxml2)

The remote host is missing updates announced in advisory GLSA 201203-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201203-04 (libxml2)

The remote host is missing updates announced in advisory GLSA 201203-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201202-03 (maradns)

The remote host is missing updates announced in advisory GLSA 201202-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201202-03 (maradns)

The remote host is missing updates announced in advisory GLSA 201202-03. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201203-05 (rack)

The remote host is missing updates announced in advisory GLSA 201203-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

libxml2: Denial of service

Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description libxml2 does not properly randomize hash functions to protect against hash collision attacks. Impact A remote attacker could entice a user or automated system to open a specially crafted XML document...

GLSA-201203-04 : libxml2: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-04 libxml2: Denial of Service libxml2 does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could entice a user or automated system to open a specially crafted XML...

Rack: Denial of service

Background Rack is a modular Ruby web server interface. Description Rack does not properly randomize hash functions to protect against hash collision attacks. Impact A remote attacker could send a specially crafted form post, possibly resulting in a Denial of Service condition. Workaround There i...

GLSA-201203-05 : Rack: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-05 Rack: Denial of Service Rack does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could send a specially crafted form post, possibly resulting in a Denial of...

Mandriva Linux Security Advisory : ruby (MDVSA-2012:024)

A vulnerability has been found and corrected in ruby : Ruby aka CRuby before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an...

USN-1377-1: Ruby vulnerabilities

Drew Yao discovered that the WEBrick HTTP server was vulnerable to cross-site scripting attacks when displaying error pages. A remote attacker could use this flaw to run arbitrary web script. CVE-2010-0541 Drew Yao discovered that Ruby's BigDecimal module did not properly allocate memory on 64-bi...

GLSA-201202-03 : MaraDNS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201202-03 MaraDNS: Denial of Service MaraDNS does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could send many specially crafted DNS recursive queries, possibly...

Apache Tomcat 7.0.x < 7.0.23 Hash Collision DoS

Binary data 6334.pasl...

Apache Tomcat 5.5.x < 5.5.35 Hash Collision Denial of Service

Binary data 800626.prm...

Apache Tomcat 5.5.x < 5.5.35 Hash Collision Denial of Service

Binary data 6331.pasl...

MaraDNS: Denial of service

Background MaraDNS is a proxy DNS server with permanent caching. Description MaraDNS does not properly randomize hash functions to protect against hash collision attacks. Impact A remote attacker could send many specially crafted DNS recursive queries, possibly resulting in a Denial of Service...

PHP 5.3.9 'php_register_variable_ex()' Code Execution (intrusive check)

The remote host is running a version of PHP that is affected by an arbitrary code execution vulnerability. Specifically, the fix for the hash collision denial of service vulnerability CVE-2011-4885 introduces a remote code execution vulnerability in the function 'phpregistervariableex' in the fil...