Gzip Memory Bomb Denial Of Service

This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...

CVE-2003-1433

Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times...

PT-2003-1462 · Apache +1 · Apache Httpd +1

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Apache httpd 2.0 Description: The issue allows attackers to bypass intended access restrictions if PHP is running on a server that passes on all methods. This is because PHP treats unknown methods, such as...

OpenSSH contains buffer management errors

Overview Versions of the OpenSSH server prior to 3.7.1 contain buffer management errors. While the full impact of these vulnerabilities are unclear, they may lead to memory corruption and a denial-of-service situation. Description Versions of OpenSSH prior to 3.7.1 contain errors in the general...

Trillian 0.74 - Remote Denial of Service

/ -------------------------------------------- :::::::::::::::::: trillian 0.7d patch :::::Denial:of:Service::simple:exploit:: -----------------------------l0bstah----- usage :: : trillah name attacked-nick comment:: after patch .74d, exploits, wich use damage 4095 data not work, but this exploit...

rinetd DoS

Setting more than 64 connection could cause server to fail...

iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 04.08.03: http://www.idefense.com/advisory/04.08.03.txt Denial of Service in Apache HTTP Server 2.x April 8, 2003 I. BACKGROUND The Apache Software Foundation's HTTP Server Project is an effort to develop and maintain an...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2002-0964

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

CVE-2002-0964: Undefined Security Weakness

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

CVE-2002-0406: Undefined Security Weakness

Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in...

DeleGate array index overflow

Array index overflow on large number of User-Agent in robots.txt...

zlib gzprintf() buffer overflow

Buffer overflow if resulting string exceeds 4K buffer...

Checkpoint Firewall fails on CVP scanning for large files

Subject: Checkpoint Firewall fails on CVP scanning large files Affected: Check Point FireWall-1 NG Feature Pack 3 Vendor: Check Point Author: Igor U.Miturin [email protected] Date: February, 5 2003 Risk: Low Vendor Notified: Yes I. Intro Check Point FireWall-1 is enterprise firewall...

CVE-2002-1932

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events clear log manually" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection...

CVE-2002-2243

Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service refused connections by opening a connection and not closing it...

MySQL < 3.23.54 / 4.0.6 Multiple Vulnerabilities

The remote host is running a version of MySQL older than 3.23.54 or 4.0.6. The remote version of this product contains several flaw that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. Ref: From: Stefan Esser Message-ID: To: [email protected]...

CVE-2002-0964

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

IBM WebSphere DoS

There is no limit for HTTP headers...

Alleged Outlook Express 5/6 Link - Denial of Service

source: https://www.securityfocus.com/bid/5682/info Reportedly, when decoding a HTML email, Outlook Express will stop responding upon encountering a link longer than 4095 characters. It is not confirmed why this behaviour occurs...