Web Servers SSL Flooding Denial of Service (CVE-2011-3389)

The vulnerability is due to the server's inability to handle multiple incoming SSL requests within a short period of time. Remote attackers may exploit this issue by rapidly sending a large number of SSL requests to the server. The attack may be initiated from one or more sources DDoS. Successful...

ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-287 October 15, 2011 - -- CVE ID: CVE-2011-1996 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors...

Supermicro IPMI Password Disclosure

== Product == Tested hardware: Supermicro X8SI6-F mainboard - IPMI firmware: 2.50 Supermicro X9SCL-F mainboard - IPMI firmware: 1.01 Likely affects other Supermicro boards of those generations that use the same type of firmware. == Problem == Modern servers often include a feature called IPMI to...

Web Servers HTTP Flooding Denial of Service

The vulnerability is due to the server's inability to handle multiple incoming HTTP requests within a short period of time. Remote attackers may exploit this issue by rapidly sending a large number of HTTP requests to the server. The attack may be initiated from one or more sources DDoS. Successf...

CVE-2011-3273

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall aka ZBFW is configured, allows remote attackers to cause a denial of service memory consumption or device crash via vectors that trigger many session creation flows, aka Bug ID CSCti79848...

Memory corruption

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall aka ZBFW is configured, allows remote attackers to cause a denial of service memory consumption or device crash via vectors that trigger many session creation flows, aka Bug ID CSCti79848...

CVE-2011-3273

CVE-2011-3273 refers to memory leaks in Cisco IOS Software when IPS or Zone-Based Firewall is configured, leading to memory exhaustion or device crash under high session-creation rates or processing specially crafted HTTP packets. The vulnerability affects Cisco IOS IPS/ZBFW configurations (notab...

CVE-2011-3273

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall aka ZBFW is configured, allows remote attackers to cause a denial of service memory consumption or device crash via vectors that trigger many session creation flows, aka Bug ID CSCti79848...

Cisco IOS multiple security vulnerabilities

IP SLA DoS, smart install TCP/4786 code execution, memory leaks in IPS and firewall features, multiple SIP vulnerailibites, multiple protocols NAT translation DoS, multiple IPv6 DoS, DLSw DoS...

Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities - Cisco Systems

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are : - Memory leak - Denial of service caused by processing specially crafted HTTP packets Cisco has released free software updat...

Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are: Memory leak in Cisco IOS Software Cisco IOS Software Denial of Service when processing specially crafted HTTP packets Cisco h...

Linux Kernel TCP Sequence Number Generation Security Weakness

The Linux kernel is prone to a security weakness related to TCP sequence number generation. Attackers can exploit this issue to inject arbitrary packets into TCP sessions using a brute-force attack. An attacker may use this vulnerability to create a denial of service condition or a...

Repeated Character Conversion Obfuscation

Although various security products provide coverage against many web vulnerabilities, Metasploit exploits could potentially bypass these security products by using JavaScript obfuscation techniques. An example of such a technique is the repeated character conversion obfuscation. Such techniques...

ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability

ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-277 August 31, 2011 -- CVE ID: CVE-2011-0258 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple QuickTime --...

Multiple RDP Initial Connection Requests

Remote Desktop Protocol RDP protocol is a well-established method of secure communication in a client and server architectural model. Brute Force Attacks are a significant threat on users privacy. Using Brute Force it is possible to crack a user account on the remote target and compromise it. The...

ZDI-11-276: Adobe Flash Player MP4 sequenceParameterSetNALUnit Remote Code Execution Vulnerability

ZDI-11-276: Adobe Flash Player MP4 sequenceParameterSetNALUnit Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-276 August 23, 2011 -- CVE ID: CVE-2011-2140 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Flash...

ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability

ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-271 August 17, 2011 -- CVE ID: CVE-2011-2378 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Mozilla -- Affected Products: Mozilla...

ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability

ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-255 August 16, 2011 -- CVE ID: CVE-2011-0247 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quickti...

ZDI-11-262: Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability

ZDI-11-262: Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-262 August 16, 2011 -- CVE ID: CVE-2011-0547 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Symantec -- Affected...

ZDI-11-264: Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow Remote Code Execution Vulnerability

ZDI-11-264: Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-264 August 16, 2011 -- CVE ID: CVE-2011-0547 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Symantec --...