cyan soft Multiple Applications Format String Vulnerability and Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function...

JBoss Enterprise Application Platform Remote-Naming连接处理验证绕过漏洞

CVE ID:CVE-2013-4218 JBOSS是一个基于J2EE的开放源代码的应用服务器 通过remote-naming把已验证连接缓存在服务器上时存在一个漏洞，在用户成功登录后，远程攻击者可使用remoting客户端需要密码以该用户身份登录，允许以该用户上下文执行任意操作或访问数据 0 JBoss Enterprise Application Platform 6.1.0 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://rhn.redhat.com/errata/RHSA-2013-1151.html...

HP LoadRunner < 11.52 SSL Connection Handling Stack Buffer Overflow RCE

Binary data hploadrunnercve-2013-4800.nbin...

Ubuntu 10.04 LTS / 10.10 / 11.04 : acpid vulnerability (USN-1234-1)

Vasiliy Kulikov discovered that acpid did not properly handle connections from poorly behaving clients. A local attacker could potentially exploit this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CentOS Update for finch CESA-2009:1453 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2225-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2225-1. OpenVAS Vulnerability Test $Id: deb22251.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2225-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2225-1 : asterisk - several vulnerabilities

Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit. - CVE-2011-1147 Matthew Nicholson discovered that incorrect handling of UDPTL packets may lead to denial of service or the execution of arbitrary code. - CVE-2011-1174 Blake Cornell discovered that...

Ubuntu: Security Advisory (USN-613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-613-1: GnuTLS vulnerabilities

Multiple flaws were discovered in the connection handling of GnuTLS. A remote attacker could exploit this to crash applications linked against GnuTLS, or possibly execute arbitrary code with permissions of the application's user...

cyan soft - Multiple Applications Format String / Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function. These applications are also...

cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities

cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the...

[SA13143] RealVNC Multiple Connections Denial of Service Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability

TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...

Jabber SSL DoS

SSL connection handling DoS...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

Desktop Orbiter 2.0 1 - Resource Exhaustion (Denial of Service)

// source: https://www.securityfocus.com/bid/7759/info A denial of service vulnerability has been reported for Desktop Orbiter. The vulnerability exists due to the way the application handles connections. Specifically, for every open connection, a snapshot preview of the desktop is loaded into...

Desktop Orbiter 2.0 1 - Resource Exhaustion (Denial of Service)

Desktop Orbiter 2.0 1 - Resource Exhaustion Denial of Service // source: https://www.securityfocus.com/bid/7759/info A denial of service vulnerability has been reported for Desktop Orbiter. The vulnerability exists due to the way the application handles connections. Specifically, for every open...

DEBIAN-CVE-2003-0212

handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections...

[NT] eServ Memory Leak Enables Denial of Service Attacks

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

eserv-mem.txt

eServ Memory Leak Enables Denial of Service Attacks I. Product Description eServ is a hybrid Web server HTTP, FTP server, mail server POP3, SMTP, Finger, news server NNTP, and proxy server. It provides all these services in a single package, so that administrators are not required to run multiple...