MDKA-2007:088-1 : hal

HAL daemon could use 100% cpu when some non storage SCSI peripheral when connected to a system. Update packages fix this issue by upgrading to new version 0.5.9.1, as well as other stability fixes and improved suspend/hibernation for some laptops. Update: An error was introduced in the previous...

Mandriva Update for hal MDKA-2007:088-1 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088-1 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Mandriva Update for hal MDKA-2007:088 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for hal MDKA-2007:088-1 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088-1 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

MS Internet Explorer JavaScript screen[ ] Denial of Service Exploit

No description provided by source. svchost.exe CPU usage boils up to almost 100 percent when we open the malicious webpage and IE7 Version 7.0.5730.13 closes with all tabs. Tested On: MicrosoftR WindowsR Server 2003, Standard Edition with Service Pack 2 With: IE Version 7.0.5730.13 I didn't use...

Microsoft Internet Explorer Javascript Denial Of Service

svchost.exe CPU usage boils up to almost 100 percent when we open the malicious webpage and IE7 Version 7.0.5730.13 closes with all tabs. Tested On: MicrosoftR WindowsR Server 2003, Standard Edition with Service Pack 2 With: IE Version 7.0.5730.13 I didn't use Javascript anywhere in the HTML belo...

libxml2: billion laughs DoS attack

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka the "billion laughs...

DEBIAN-CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

openssl public key DoS

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA...

Ruby cgi.rb Denial of Service Vulnerability

Overview The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces. Impact An attacker could cause a Denial of Service DoS on the Web services using cgi.rb...

Sun Solaris TCP SYN Flood远程拒绝服务漏洞

BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...

PT-2008-3637 · Ibm · Ibm Rational Build Forge

Name of the Vulnerable Software and Affected Versions: IBM Rational Build Forge version 7.0.2 Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption. This is achieved via a port scan, which spawns multiple bfagent server processes that attempt to...

Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

HP OpenView网络节点管理器ovalarmsrv.exe服务多个远程漏洞

BUGTRAQ ID: 28668 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的ovalarmsrv服务中存在多个远程漏洞，允许远程攻击者执行任意代码或导致拒绝服务。 ------------------------------ A ovalarmsrv格式串漏洞 ------------------------------ ovalarmsrv.exe进程监听于2953端口。如果使用缺少了以下格式参数的消息调用了ov.fprintfnew（之后会调用vsprintf）的话，就会导致格式串攻击：...

Fedora 7 : deluge-0.5.8.3-1.fc7 (2008-1288)

Version 0.5.8.3 of the Deluge BitTorrent client contains a security fix for a remote exploit which could cause Deluge to crash. It also fixes some high CPU usage spikes, loading issues with the BlocklistImport plugin, and lock-ups when the tracker returns data that is not properly UTF8-encoded...

Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699

Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...

firefly media server (mt-daapd) 2.4.1 svn 1699 - Multiple Vulnerabilities

firefly media server mt-daapd 2.4.1 svn 1699 - Multiple Vulnerabilities Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B...

MS Windows PNG File IHDR Block Denial of Service Exploit PoC

No description provided by source. !/usr/bin/perl Microsoft Windows PNG IHDR block DoS poc More info: http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=6 Written by Preddy don't create the poc png file on windows it won't work as it should when i create it on windows with activeper...

Symantec Enterprise Security Manager远程拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 ESM在处理请求连接时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果某些网络扫描访问了ESM的网络端口的话，ESM解释某些信息可能会出现竞争条件，导致管理器和代理挂起，导致接近100%的CPU使用率。 Symantec Enterprise Security Manager 6.5.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Microsoft Visual Basic 6.0 Project (Company Name) Stack overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== Microsoft Visual Basic 6.0 Project Company Name Stack overflow PoC ==================================================================== !/usr/local/bin/perl Discovered By UmZ...