CVE-2002-0866

CVE-2002-0866 affects Microsoft's Java VM JDBC classes, where JDBC functionality could be misused by a Java applet to load and execute a DLL via com.ms.jdbc.odbc.JdbcOdbc, with the DLL name terminated by a null string. The issue enables remote execution of DLLs from the client system, as describe...

CVE-2002-1260

The Java Database Connectivity JDBC APIs in Microsoft Virtual Machine VM 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet...

CVE-2002-0866

Java Database Connectivity JDBC classes in Microsoft Virtual Machine VM up to and including 5.0.3805 allow remote attackers to load and execute DLLs dynamic link libraries via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string,...

ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows

Pentest Limited Security Advisory WIDCOMM Bluetooth Connectivity Software Buffer Overflows Advisory Details ---------------- Title: WIDCOMM Bluetooth Connectivity Software Buffer Overflows Announcement date: 11 August 2004 Advisory Reference: ptl-2004-03 CVE Name: CAN-2004-0775 Products: WIDCOMM...

U.S. Robotics USR808054 Wireless Access Point - Web Administration Denial of Service

source: https://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying service to legitimate users of the...

[VulnWatch] Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B)

NGSSoftware Insight Security Research Advisory Name: Macromedia Dreamweaver Remote Database Scripts Systems Affected: IIS/Dreamweaver MX and UltraDev 4 Severity: Critical Vendor URL: http://www.macromedia.com/ Author: David Litchfield [email protected] Date Vendor Notified: 10th March 2004 Da...

Motorola T720 cell phone DoS vulnerability.

Product: Motorola T720 Cell phones http://www.motorola.com Versions: T270 Bug: DoS vulnerability Impact: Attacker's can reboot the cellphone remotely. Date: March 01, 2004 Author: Shaun Colley Email: [email protected] WWW: http://www.nettwerked.co.uk Introduction "The Motorola T720 proves that...

PalmOS 34 - ICMP Flood Remote Denial of Service

PalmOS 34 - ICMP Flood Remote Denial of Service // source: https://www.securityfocus.com/bid/7597/info A problem with PalmOS may result in a denial of service. It has been reported that PalmOS becomes unstable when flooded with ICMP ECHOREQUEST traffic. A remote attacker can trigger a device lock...

Brocade Firmware SNMP Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Brocade Firmware SNMP Vulnerability Number : 20030405-01-I Date : April 11, 2003 Reference: SGI BUG 876762 Reference: CERT CA-2002-03 Reference: CVE CAN-2002-0013 Reference: CVE CAN-2002-0017 Fixed in : Brocade Firmware v2.6.0d or...

CVE-2002-1260

The Java Database Connectivity JDBC APIs in Microsoft Virtual Machine VM 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet...

CVE-2002-0866

Java Database Connectivity JDBC classes in Microsoft Virtual Machine VM up to and including 5.0.3805 allow remote attackers to load and execute DLLs dynamic link libraries via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string,...

Microsoft Java implementation JDBC functions do not properly validate parameters

Overview The Java Database Connectivity JDBC classes of Microsoft's Java virtual machine VM contain functions that do not properly validate parameters. A malicious Java applet can exploit this vulnerability to crash programs on the client system. Description Microsoft's Java VM is installed on...

Oracle 8.1.x/9.0/9.2 - TNS Listener Service_CurLoad Remote Denial of Service

source: https://www.securityfocus.com/bid/5678/info The Oracle TNS Listener program is a remote connectivity service for Oracle Databases. Under some circumstances, it may be possible for a remote user to crash TNS Listener service. By connecting to the service, and issuing the SERVICECURLOAD...

CVE-2002-0779

FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service network connectivity loss via a connection to port 21 with a large amount of random data...

phenoelit advisory, Brother Printers ++/-

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +-++ Authors FX [email protected] FtR [email protected] kim0 [email protected] DasIch [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/BrotherNC.txt Affected Products Brother Corporation NC-3100...

CVE-2002-0779

FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service network connectivity loss via a connection to port 21 with a large amount of random data...

IPRoute Fragmentation Denial of Service Vulnerability

IPRoute Fragmentation Denial of Service Vulnerability by Chris Gragsone and The TechnoDragon Foot Clan Date: December 2, 2001 Advisory ID: Foot-20011202 Impact of vulnerability: Denial of Service Exploitable: Remotely Maximum Risk: Moderate Affected Software: IPRoute v1.18 IPRoute v0.974 IPRoute...

Security Bulletin MS01-046

---------------------------------------------------------------------- Title: Access Violation in Windows 2000 IRDA Driver Can Cause System to Restart Date: 21 August 2001 Software: Windows 2000 Impact: Denial of Service Bulletin: MS01-046 Microsoft encourages customers to review the Security...

NetBSD Security Advisory 2001-006: Denial of service using bogus fragmented IPv4 packets

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-006 ================================= Topic: Denial of service using bogus fragmented IPv4 packets Version: NetBSD 1.4, 1.5, -current Severity: Network-connected systems can be crashed remotely Fixed: NetBSD-current: April 17, 2001...

CVE-2001-0006

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...