45 matches found
Useragent Denial of Service Vulnerability
Useragent is a user agent parser that parses user agent strings by matching browsers with specialized regular expressions. A security vulnerability exists in Useragent 2.1.12 and earlier versions, which stems from the program's use of regular expressions to parse user agent packet headers. The...
CVE-2017-16030
Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier...
Hawk Denial of Service Vulnerability
Hawk is a set of HTTP authentication schemes that use Message Authentication Code MAC algorithms in order to provide cryptographic authentication of localized HTTP requests. A denial-of-service vulnerability exists in Hawk versions prior to 3.1.3 and 4.x prior to 4.1.1, which can be exploited by...
CVE-2014-4728
The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...
Cross site request forgery (csrf)
The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...
CVE-2014-4728: Undefined Security Weakness
The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...
PT-2014-6080
Name of the Vulnerable Software and Affected Versions TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 versions prior to 140916 Description The issue allows remote attackers to cause a denial of service, resulting in the router crashing, by sending a GET request with a long header...
Virata EmWeb R6.0.1 - Remote Crash Vulnerability
No description provided by source. Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will b...
Centrinity FirstClass 5.77 0 Intranet Server Long Header Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1421/info If an E-mail containing an excessively long To: field in the header 1.5 MB is processed by First Class Intranet Services FCIS, a Denial of Service can occur. http://www.exploit-db.com/sploits/20052.tar.gz...
Virata EmWeb R6.0.1 - Remote Crash
Virata EmWeb R6.0.1 - Remote Crash Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will b...
Virata EmWeb R6.0.1 - Remote Crash
Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -...
openSUSE 10 Security Update : cyrus-imapd (cyrus-imapd-6511)
This update fixes another buffer overflow in the Sieve code CVE-2009-3235. This can be exploited by users allowed to use their own sieve scripts to execute arbitrary code remotely. Additionally the handling of long headers was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Thunderbird cancelled newsgrop messages
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long header in a news article, related to "canceling a newsgroup message" and "cancelled...
lighttpd mod_fastcgi HTTP Request Header Remote Overflow
The remote web server appears to be lighttpd running with the FastCGI module modfastcgi. The version of the FastCGI module on the remote host is affected by a buffer overflow vulnerability. A remote attacker can exploit this, by sending a specially crafted request with a long header, to add or...
CVE-2006-6940
Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA pop2owa 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message...
VulnCheck KEV: CVE-2006-4434
Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...
Buffer overflow
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...
CVE-2006-0359: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...
DEBIAN-CVE-2005-1266
Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...
