Apache CXF Denial of Service Vulnerabilities Patched

The Apache Software Foundation has patched a denial of service vulnerability in the XML parser of the Apache CXF Web services framework. Researchers, Andreas Falkenberg from Sec Consult Vulnerability Labs, and Christian Mainka, Juraj Somorovsky, and Joerg Schwenk from Ruhr-University Bochum,...

RedHat Update for php RHSA-2011:0195-01

Check for the Version of php OpenVAS Vulnerability Test RedHat Update for php RHSA-2011:0195-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RHEL 4 : glibc (RHSA-2012:0125)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0125 advisory. - glibc: tzfileread integer overflow to buffer overflow CVE-2009-5029 - glibc: ldd unexpected code execution issue CVE-2009-5064 - glibc:...

RHEL 6 : glibc (RHSA-2012:0058)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0058 advisory. - glibc: tzfileread integer overflow to buffer overflow CVE-2009-5029 - glibc: svcrun produces high cpu usage when accept fails with EMFILE...

glibc security and bug fix update

2.12-1.47.el62.5 - Avoid high cpu usage when accept fails with EMFILE 767692 2.12-1.47.el62.4 - Make implementation of ARENASTEST and ARENASMAX match documentation 769594 - Check malloc arena atomically 769594 2.12-1.47.el62.3 - Check values from TZ file header 767692 2.12-1.47.el62.2 - Correctly...

Moderate: Red Hat Security Advisory: php53 security update

Updated php53 packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Opera < 10.61 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.61. Such versions are potentially affected by the following issues : - A heap overflow when performing painting operations on an HTML5 canvas can result in execution of arbitrary code. 966 - An issue with tab focus is open to an...

Opera < 10.61 Multiple Vulnerabilities

Binary data 5626.prm...

Core FTP Server 1.0 build 304 - Denial of Service

Core FTP Server 1.0 build 304 - Denial of Service !/usr/bin/env python Core FTP Server 1.0, build 304 Remote Denial of Service Exploit Pre Auth Found By: DrIDE Tested On: Windows XPSP3 Download: http://www.coreftp.com/server/ Notes: This will cause CPU usage to go to 100% and prevent new...

Ruby cgi.rb Denial of Service Vulnerability

Overview The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces. Impact An attacker could cause a Denial of Service DoS on the Web services using cgi.rb...

Sun Solaris TCP SYN Flood远程拒绝服务漏洞

BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...

ie7-dos.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Internet Explorer Version 7.0.5730.11 Impact: Browser crash possibly more Author: Jesus Oquendo echo @infiltrated|sed 's/^/sil/g;s/$/.net/g' I. BACKGROUND Why bother? Who doesn't know what Internet Explorer and Microsoft are. II. DESCRIPTION ...

TippingPoint IPS intrusion prevention system DoS

Large CPU consumption on HTML documents parsing...

[Full-Disclosure] Freeze in Pigeon Server 3.02.0143

Luigi Auriemma Application: Pigeon Server http://www.tech-noel.com Versions: = 3.02.0143 Platforms: Windows Bug: freeze Risk: medium Exploitation: remote, versus server Date: 16 September 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Norton AntiVirus Denial of Service Vulnerability

No description provided by source. Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 not vulnerable Mcafee 7 Mcafee 8 Risk Impact: Medium Remote: yes Description: While having a virus...

CVE-2004-0478

Unknown versions of Mozilla allow remote attackers to cause a denial of service high CPU/RAM consumption using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U...

Opera 7 - Denial of Service

source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser to terminate or freeze. This...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

Microsoft Windows Server 2000 - Lanman Denial of Service 2 source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage...

Leafnode security announcement SA:2002:01

-----BEGIN PGP SIGNED MESSAGE----- leafnode-SA-2002:01.versions Topic: vulnerabilities in leafnode Announcement: leafnode-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-12-29 Category: main Type: denial of service Impact: CPU busy loop Credits: Jan Knutar jknutar, nic dot fi, fo...