CVE-2003-0775

CVE-2003-0775 affects sane-backends (notably the saned daemon) up to version 1.0.7 and earlier. The root cause is that saned mallocs memory based on a size value, which can be sent, or may be left unknown if the connection is dropped before the size is transmitted, enabling remote attackers to tr...

CVE-2003-0775

saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...

[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...

DSA-379 sane-backends - several vulnerabilities

Bulletin has no description...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...

CVE-2003-0572

The CVE-2003-0572 issue concerns the SGI IRIX Name Service Daemon (nsd). The SGI advisory notes multiple nsd vulnerabilities in IRIX 6.5.x up to 6.5.20f (and possibly earlier), with the specific CVECAN-2003-0572 issue described as dynamic maps in nsd that can be made to consume memory, leading to...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...

CVE-2003-0428

CVE-2003-0428 involves an unknown vulnerability in the DCERPC (DCE/RPC) dissector of Ethereal 0.9.12 and earlier. The issue allows remote attackers to cause a denial of service via memory consumption when decoding a crafted NDR string. Public sources describe the vulnerability across multiple adv...

PT-2003-1619 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue is related to a problem in the DCERPC DCE/RPC dissector, allowing remote attackers to cause a denial of service by consuming memory via a certain NDR string. Recommendations: For...

CVE-2003-0225

The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...

CVE-2003-0225

Affected software: Microsoft IIS 4.0 and 5.0. Vulnerable component: ASP Response.AddHeader handling, which fails to cap memory usage when constructing headers. Impact: remote attackers can craft an ASP page to generate a large header, causing memory exhaustion and denial of service. Root cause (p...

CVE-2003-0225

The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...

CVE-2002-0404

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

CVE-2002-0404

Ethereal (network traffic analyzer) is affected by a memory-consumption DoS in the GIOP dissector prior to version 0.9.3. Red Hat and Debian advisories summarize the issue as a vulnerability in Ethereal’s dissectors (GIOP), where memory allocation/consumption can be exploited remotely to impact a...

CVE-2003-0166

Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...

CVE-2003-0166

Integer signedness error in emalloc function for PHP before 4.3.2 allow remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via negative arguments to functions such as 1 socketrecv, 2 socketrecvfrom, and possibly other functions...

CVE-2003-0166

PHP prior to 4.3.2 is affected by CVE-2003-0166 due to a signedness error in emalloc() that can allow remote attackers to cause memory exhaustion and potentially execute arbitrary code via negative arguments to functions such as socket_recv and socket_recvfrom (and possibly others). The issue ste...

CVE-2003-0129

Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service memory consumption via a mail message that is uuencoded multiple times...

CVE-2003-0129

Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service memory consumption via a mail message that is uuencoded multiple times...

CVE-2003-0129

CVE-2003-0129 affects Ximian Evolution Mail User Agent up to version 1.2.2, allowing remote attackers to cause memory exhaustion/DoS by uuencoding a mail message multiple times. Related issues CAN-2003-0128 and CAN-2003-0130 are addressed in the same advisory. Vendor patch: Evolution 1.2.3 releas...