653 matches found
openssl: integer underflow leading to buffer overflow in base64 decoding
An integer underflow flaw, leading to a buffer overflow, was found in the way OpenSSL decoded malformed Base64-encoded inputs. An attacker able to make an application using OpenSSL decode a specially crafted Base64-encoded input such as a PEM file could use this flaw to cause the application to...
Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service...
openssl: integer underflow leading to buffer overflow in base64 decoding
An integer underflow flaw, leading to a buffer overflow, was found in the way OpenSSL decoded malformed Base64-encoded inputs. An attacker able to make an application using OpenSSL decode a specially crafted Base64-encoded input such as a PEM file could use this flaw to cause the application to...
Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service...
kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks
A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled malformed Address Configuration Change Chunks ASCONF. A remote attacker could use either of these flaws to crash the system...
USN-2278-1 file vulnerabilities
Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. An attacker could use this issue to cause file to consume resources, resulting in a denial of service. CVE-2013-7345 Francisco Alonso discovered that file incorrectly handled certain CDF...
Microsoft NetMeeting 3.0.1 4.4.3385 Remote Desktop Sharing DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to...
quagga: DoS (crash) by processing malformed extended community attribute in a route
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed Extended Communities attribute...
CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
DEBIAN-CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service exit node crash via "malformed input."...
Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input. Successfully exploiting these issues allows remote attackers to crash the affect...
Microsoft Word Malformed Document Font Processing Buffer Overflow Vulnerability
Description Microsoft Word is affected by a remote buffer overflow vulnerability. This vulnerability presents itself when a .doc file contains specific malformed input. Upon attempting to read the malformed .doc file, the affected application fails to properly validate data within the file. This...
[Full-Disclosure] bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 bogofilter-SA-2004-01 rfc2047crash Topic: vulnerability in bogofilter/bogolexer Announcement: bogofilter-SA-2004-01 Writer: Matthias Andree Version: 1.00 CVE id: none yet Announced: 2004-10-30 Category: vulnerability Type: segmentation fault through...
Chatman 1.5.1 RC1 Broadcast Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================== Chatman 1.5.1 RC1 Broadcast Denial of Service Exploit ===================================================== ////////////// chatmanx.c ///////////// / by Luigi Auriemma / include include includ...
Novell FTP Malformed Input Remote DoS
Binary data 1806.prm...
Novell NetWare FTPServ Malformed Input Remote DoS
The installed version of Novell FTPServ does not handle certain types of input properly. An attacker can exploit this flaw to crash the FTP service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11614; scriptversion"1.20"; scriptbugtraqid7072; scriptnameenglish:"Nove...
CVE-2002-1191
The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001...
CVE-2002-1191
The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001...
CVE-2002-0224
The MSDTC Microsoft Distributed Transaction Service Coordinator for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service crash or hang via malformed random input...