143 matches found
UBUNTU-CVE-2016-2106
Integer overflow in the EVPEncryptUpdate function in crypto/evp/evpenc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of data...
The vulnerability of the Radia Client Automation program allows a hacker to execute arbitrary code.
The vulnerability of the Radia Client Automation user automation program arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a large amount of data...
CVE-2014-9715
include/net/netfilter/nfconntrackextend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service NULL pointer dereference and OOPS via outbound network traffic that...
DEBIAN-CVE-2014-6269
Multiple integer overflows in the httprequestforwardbody function in protohttp.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service crash via a large stream of data, which triggers a buffer overflow and an out-of-bounds read...
X.Org xorg-x11-xfs <= 1.0.2-3.1 - Local Race Condition Exploit
No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...
Fortinet FortiWeb Web Application Firewall Policy Bypass
No description provided by source. BINAR10 Report on Fortinet Fortiweb Findings 02/05/2012 - Fortinet FortiWeb Web Application Firewall Policy Bypass - ============================================================ 1 Affected Product Fabricant: Fortinet Product name: FortiWeb Version: Latest update...
Pragma Systems InterAccess TelnetD Server 4.0 - Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/2834/info Pragma InterAccess for Microsoft 95/98 is a fully-featured commercial Telnet server. Pragma InterAccess does not adequately compensate for large bursts of data being sent to port 23telnet. If an excessive amount...
Hitachi Device Manager Software Denial of Service (DoS) Vulnerability
Overview Hitachi Device Manager Software HDvM contains a denial of service abend vulnerability when receiving a large amount of data at once. If HDvM exits abnormally, users will be able to resume using the software by restarting the HDvM service or daemon. Impact A remote attacker could cause a...
DEBIAN-CVE-2011-4137
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...
PYSEC-2011-2
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...
CVE-2009-5034
IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service memory consumption and daemon crash by syncing a large volume of data, related to the launch of a new process to handle the data while the previous process is still operating on the data...
PHP ""multipart/form-data"" Denial of Service Exploit (Python)
No description provided by source. !/usr/bin/python -- coding: utf-8 -- Author: Eren Turkay eren .-. pardus.org.tr, 2009/11/20 http://www.pardus.org.tr/eng/ Credits: Bogdan Calin from Acunetix Description: Exploit to cause denial of service on any host that runs PHP via temporary file exhaustion...
Code injection
Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service application crash via 1 a value greater than 0x27 for the a 0xca, b 0xcb, c 0xcc, d 0xce, e 0xcf, or f 0xd0 data ID; 2 a nonexistent map name; or 3 a UDP packet that specifies a large data size...
CVE-2006-2814
Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...
CVE-2006-2814
Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...
security flaw
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service blocked connections via a large amount of data...
USN-273-1: Ruby vulnerability
Yukihiro Matsumoto reported that Ruby's HTTP module uses blocking sockets. By sending large amounts of data to a server application that uses this module, a remote attacker could exploit this to render this application unusable and not respond any more to other clients Denial of Service...
EUVD-2003-1256
The 1 FTP, 2 POP3, 3 SMTP, and 4 NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote attackers to cause a denial of service crash via a large amount of data...
