3523 matches found
CVE-2009-4367
The Staging Webservice "sitecore modules/staging/service/api.asmx" in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and 1 upload files, 2 download files, 3 list directories, and 4 clear the server cache via crafted SOAP requests with arbitra...
IBM Director CIM Server Consumer Name Handling Denial of Service (CVE-2009-0879)
IBM Director is an element management system, previously known as Netfinity Director that was designed by IBM based on Tivoli IT Director. It consists of three components: agent, administering console, and server. The agent software is installed on systems to be monitored and other components...
CVE-2009-2868
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service Phase 1 SA exhaustion via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997...
Authentication flaw
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service Phase 1 SA exhaustion via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997...
CVE-2009-2868
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service Phase 1 SA exhaustion via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997...
CVE-2009-2862: Undefined Security Weakness
The Object Groups for Access Control Lists ACLs feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and...
DEBIAN-CVE-2009-2629
Buffer underflow in src/http/ngxhttpparse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests...
USN-827-1: Dnsmasq vulnerabilities
IvAin Arce, Pablo HernAin Jorge, Alejandro Pablo Rodriguez, MartAn Coco, Alberto SoliAto Testa and Pablo Annetta discovered that Dnsmasq did not properly validate its input when processing TFTP requests for files with long names. A remote attacker could cause a denial of service or execute...
TheGreenBow IPSec VPN Client Denial Of Service Vulnerability
This host has TheGreenBow IPSec VPN Client installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodthegreenbowipsecvpnclientdosvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ TheGreenBow IPSec VPN Client Denial Of Service Vulnerability Authors: Nikita MR...
Mandrake Security Advisory MDVSA-2009:168 (apache)
The remote host is missing an update to apache announced via advisory MDVSA-2009:168. OpenVAS Vulnerability Test $Id: mdksa2009168.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:168 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Debian Security Advisory DSA 1843-2 (squid3)
The remote host is missing an update to squid3 announced via advisory DSA 1843-2. OpenVAS Vulnerability Test $Id: deb18432.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1843-2 squid3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-1922
The CVE-2009-1922 entry concerns Microsoft Windows Message Queuing (MSMQ) Privilege Escalation affecting Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista. The root cause is improper validation of IOCTL request data in the MSMQ IOCTL handler (mqac.sys) as data moves from user mode to kernel mo...
Mandrake Security Advisory MDVSA-2009:149 (apache)
The remote host is missing an update to apache announced via advisory MDVSA-2009:149. OpenVAS Vulnerability Test $Id: mdksa2009149.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:149 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
DSA-1843-1 squid3 - denial of service
Bulletin has no description...
httpd: mod_proxy reverse proxy DoS (infinite loop)
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service C...
httpd: mod_proxy reverse proxy DoS (infinite loop)
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service C...
httpd: mod_proxy reverse proxy DoS (infinite loop)
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service C...
Mandriva Linux Security Advisory : apache (MDVSA-2009:149)
Multiple vulnerabilities has been found and corrected in apache : The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length...
DEBIAN-CVE-2009-1890
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service C...
CVE-2009-1890
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service C...