170 matches found
mailman -- Multiple Vulnerabilities
Secunia reports: Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successfu...
CVE-2005-3857
The timeoutleases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service kernel log message consumption by causing a large number of broken leases, which is recorded to the log using the printk function...
CVE-2004-1606
Affected software: SalesLogix 6.1; vulnerable component: slxweb.dll. Description from CVE entries: remote attackers can cause a denial of service (application crash) by sending an invalid HTTP request, with potential leakage of sensitive information via the ErrorLogMsg cookie. The connected docum...
CVE-2003-0672
Removed by vendor...
CVE-2003-0672: Undefined Security Weakness
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message...
CVE-1999-1240
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message...
CVE-1999-1240: Undefined Security Weakness
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message...
CVE-2000-1165
Balabit syslog-ng allows remote attackers to cause a denial of service application crash via a malformed log message that does not have a closing in the priority specifier...
CVE-2000-1165: Undefined Security Weakness
Balabit syslog-ng allows remote attackers to cause a denial of service application crash via a malformed log message that does not have a closing in the priority specifier...