3504 matches found
Cisco IOS OSPF Packet Handling DoS (CSCec16481)
The target is a Cisco device running a version of IOS that is vulnerable to a DoS attack from a malformed OSPF packet. Given knowledge of OSPF area number, netmask, hello, and dead timers that are configured on the targeted interface, a remote attacker can send a malformed OSPF packet and cause t...
Qt BMP Parsing Bug Heap Overflow Exploit
Exploit for linux platform in category remote exploits ========================================================== MusicDaemon Hello ...... bin::9797:0::::: ftp::9797:0::::: sshd::9797:0::::: ...... email protected:/test Server Side View: email protected:/test/musicdaemon-0.0.3/src ./musicd -c...
Apache Tomcat < 3.3.1a Servlet Engine MS/DOS Device Name DoS
Binary data 1467.pasl...
ISC BIND 8 Compressed ZXFR Name Service Query DoS (deprecated)
Binary data 1013.prm...
Squid < 2.4.STABLE2 mkdir-only PUT Request DoS
Binary data 1524.prm...
SquirrelMail < 1.2.11 Multiple Script XSS
The target is running at least one instance of SquirrelMail whose version number is between 1.2.0 and 1.2.10 inclusive. Such versions do not properly sanitize From headers, leaving users vulnerable to XSS attacks. Further, since SquirrelMail displays From headers when listing a folder, attacks do...
Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:069)
A vulnerability in racoon prior to version 20040408a would allow a remote attacker to cause a DoS memory consumption via an ISAKMP packet with a large length field. Another vulnerability in racoon was discovered where, when using RSA signatures, racoon would validate the X.509 certificate but wou...
Mandrake Linux Security Advisory : htdig (MDKSA-2001:083)
A problem was discovered in the ht://Dig web indexing and searching program. Nergal reported a vulnerability in htsearch that allows a remote user to pass the -c parameter, to use a specific config file, to the htsearch program when running as a CGI. A malicious user could point to a file like...
Mandrake Linux Security Advisory : postfix (MDKSA-2003:081)
Two vulnerabilities were discovered in the postfix MTA by Michal Zalewski. Versions prior to 1.1.12 would allow an attacker to bounce- scan private networks or use the daemon as a DDoS Distributed Denial of Service tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP...
SuSE-SA:2004:010: Linux Kernel
The remote host is missing the patch for the advisory SuSE-SA:2004:010 Linux Kernel. Various vulnerabilities have been fixed in the newly available kernel updates. The updates consist of fixes for the following vulnerabilities: - The dofork memory leak, which could lead to a local DoS attack. All...
Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability Revision 1.0 For Public Release 2004 June 9 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...
[NT] Agnitum Outpost Firewall Pro DoS
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
DoS против MDaemon (imap buffer overflow)
Переполнение буфера в команде Select пользователь должен быть авторизован...
DiGi WWW Server DoS
Oversized request with large number of '/' character causes CPU exhaustion...
OpenSSL DoS
NULL pointer and uninitialized memory reference during SSL/TLS handshake...
Possible DoS on Linux kernel 2.4 and 2.6 using sigqueue overflow.
Hello. We faced a bug ? in Linux kernel causing different misbehaviours on our server. After exploration, it seems that we found some security implications of this issue. When a process exits, it's parent is notified by SIGCHLD, and finished child is kept in process table in "zombie" state until...
rsniff DoS
socket is leaked on unsuccessful authentication attempt...
Cisco IPSec VPN module IKE DoS
Device crashes on malformed IKE packet...