PHP 5.3.9 'php_register_variable_ex()' Code Execution (banner check)

According to its banner, the version of PHP installed on the remote host is 5.3.9. This version reportedly is affected by a code execution vulnerability. Specifically, the fix for the hash collision denial of service vulnerability CVE-2011-4885 itself has introduced a remote code execution...

tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

ruby: hash table collisions CPU usage DoS (oCERT-2011-003)

Ruby aka CRuby before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table...

FreeBSD : tomcat -- Denial of Service (7f5ccb1d-439b-11e1-bc16-0023ae8e59f0)

The Tomcat security team reports : Analysis of the recent hash collision vulnerability identified unrelated inefficiencies with Apache Tomcat's handling of large numbers of parameters and parameter values. These inefficiencies could allow an attacker, via a specially crafted request, to cause lar...

CVE-2012-0193

IBM WebSphere Application Server WAS 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service C...

CVE-2012-0193

IBM WebSphere Application Server WAS 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service C...

File is locked by running session

Challenge A job or task within Veeam Backup & Replication displays the following message: File is locked by running session jobname Cause When tasks run in Veeam Backup & Replication, the files accessed by those tasks are tracked within the configuration database to prevent collision. As tasks ar...

Apache Tomcat Large Number Denial Of Service

No description provided by source. CVE-2012-0022 Apache Tomcat Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.22 - Tomcat 6.0.0 to 6.0.33 - Tomcat 5.5.0 to 5.5.34 - Earlier, unsupported versions may also be affected Descriptio...

PHP Version 5 Hash Collision Form Parameter Parsing Remote DoS

Binary data php5hashcollisiondos.nbin...

FreeBSD : Multiple implementations -- DoS via hash algorithm collision (91be81e7-3fea-11e1-afc7-2c4138874f7d)

oCERT reports : A variety of programming languages suffer from a denial-of-service DoS condition against storage functions of key/value pairs in hash data structures, the condition can be leveraged by exploiting predictable collisions in the underlying hashing algorithms. The issue finds particul...

DEBIAN-CVE-2012-0039

GLib 2.31.8 and earlier, when the gstrhash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash...

python hash collision attacks exploit-vulnerability warning-the black bar safety net

/usr/bin/python to attack hash collision in python code by [email protected] 2012-01-05 to save as atk.py python atk.py 4 0 0 0 0 . 42.530313015 0.087562084198 import time, sys MAX = 1 0 0 0 0 0 try: MAX = int sys. argv1 except: pass t0= time. time k= for i in rangeMAX: k i223 1-i = 0 print '.'...

CVE-2012-0039: Undefined Security Weakness

GLib 2.31.8 and earlier, when the gstrhash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash...

PT-2012-2257 · Gnome +1 · Glib +1

Name of the Vulnerable Software and Affected Versions: GLib versions 2.31.8 and earlier Description: The issue allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, because the g str hash function computes...

Apache Tomcat 5.x < 5.5.35 Hash Collision Denial of Service

According to its self-reported version number, the instance of Apache Tomcat 5.x listening on the remote host is prior to 5.5.35. It is, therefore, affected by a denial of service vulnerability. Large numbers of crafted form parameters can cause excessive CPU consumption due to hash collisions...

RHEL 5 / 6 : php53 and php (RHSA-2012:0019)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0019 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was found that the hashing routine used by PHP...

Apache Tomcat Hash Collision Denial Of Service Vulnerability

Apache Tomcat Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco IOS Hot Standby Routing Protocol IP Collision Denial of Service

The design of the Hot Standby Routing Protocol, when using IRPAS, allows remote attackers to cause a denial of service via a router with the same IP address as the interface on which HSRP is running. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17773;...

DEBIAN-CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

CVE-2012-0024

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit s...