CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

PT-2006-4725 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 6 SP1 versions prior to MS06-042 patch 20060912 Description: A remote code execution issue exists in the way Internet Explorer handles long URLs in websites using HTTP 1.1 protocol and compression. This could allow...

Microsoft Security Advisory (923762) Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit

Microsoft Security Advisory 923762 Microsoft Security Advisory 923762: Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit Published: August 22, 2006 On August 15, 2006 Microsoft announced that it would be re-releasing MS06-042...

CVE-2006-4197

Multiple buffer overflows in libmusicbrainz aka mbclient or MusicBrainz Client Library 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 a long Location header by the HTTP server, which triggers an overflow in th...

CURL-CVE-2005-4077 URL Buffer Overflow

libcurl's URL parser function can overflow a heap based buffer in two ways, if given a too long URL. These overflows happen if you 1 - pass in a URL with no protocol like "http://" prefix, using no slash and the string is 256 bytes or longer. This leads to a single zero byte overflow of the heap...

Mandrake Linux Security Advisory : gaim (MDKSA-2004:110)

More vulnerabilities have been discovered in the gaim instant messenger client. The vulnerabilities pertinent to version 0.75, which is the version shipped with Mandrakelinux 10.0, are: installing smiley themes could allow remote attackers to execute arbitrary commands via shell metacharacters in...

GLSA-200408-27 : Gaim: New vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-27 Gaim: New vulnerabilities Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname. Receiving long URLs. Handli...

DEBIAN-CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

[NT] WinSCP Denial of Service

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more.

PRODUCT: IBM Websphere/NetCommerce3 vERSION: 3.1.2 , posibly others Unix, and NT +PATH REVEALING PROBLEM Exploit: http://host/cgi-bin/ncommerce3/ExecMacro/macro.d2w/NOEXISTINGHTMLBLOCK Result: DTWP029E: Net.Data is unable to locate the HTML block NOEXISTINGHTMLBLOCK in file...

CVE-1999-0281

Denial of service in IIS using long URLs...

CVE-1999-0281

CVE-1999-0281 describes a denial-of-service issue in Microsoft IIS triggered by long URLs. Connected documents identify IIS as the affected product and reiterate the DoS impact but do not provide concrete technical details such as vulnerable components, root cause, affected versions, or a fix. A ...

CVE-1999-0281

Denial of service in IIS using long URLs...

PT-1997-1120 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: IIS affected versions not specified Description: The issue involves a denial of service in IIS, which can be triggered by using long URLs. Recommendations: At the moment, there is no information about a newer version that contains a fix for...