PT-2005-3811 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Apache 2 affected versions not specified Description: A memory leak in the worker MPM allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from bei...

CVE-2005-3181

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIGAUDITSYSCALL is enabled, uses an incorrect function to free namescache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denia...

Fedora Core 4 : httpd-2.0.54-10.2 (2005-849)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

Fedora Core 3 : httpd-2.0.53-3.3 (2005-848)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

CVE-2005-2728

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service memory consumption via an HTTP header with a large Range field...

CVE-2005-2728

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service memory consumption via an HTTP header with a large Range field...

CVE-2005-2728

Apache httpd is affected by CVE-2005-2728 due to a flaw in the byte-range filter that can cause memory exhaustion and denial of service when handling HTTP requests with a large Range header, as described in multiple connected advisories. The issue affects Apache httpd 2.0.x before 2.0.54 (and var...

CVE-2005-2728

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service memory consumption via an HTTP header with a large Range field...

CVE-2005-2365

Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service memory consumption via unknown attack vectors...

PT-2005-3280 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.0 through 0.10.11 Description: A buffer overflow or denial of service can occur due to an unknown vulnerability in the SMB dissector. This issue may lead to memory consumption. Recommendations: For Ethereal versions 0.9....

CVE-2005-2365: Undefined Security Weakness

Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service memory consumption via unknown attack vectors...

georgiQmail.txt

Georgi Guninski security advisory 74, 2005 64 bit qmail fun Systems affected: qmail on 64 bit platforms with a lot of virtual memory 8GB Date: 6 May 2005 Legal Notice: This Advisory is Copyright c 2004 Georgi Guninski. You may not modify it and distribute it or distribute parts of it without the...

CVE-2004-2244

The CVE-2004-2244 entry affects Oracle XML parsing in Oracle Application Server Release 2 (9i) and Database Server Release 2, across multiple versions (9.0.3.0/9.0.3.1, 9.0.2.3 and earlier, Release 1 1.0.2.x, and 9.2.0.1 and later). It describes a denial-of-service condition triggered by processi...

CVE-2002-2075

ICQ 2001a and 2002b allows remote attackers to cause a denial of service memory consumption and hang via a contact message with a large contacts number...

CVE-2002-2075

The CVE-2002-2075 entry affects ICQ 2001a and ICQ 2002b. The vulnerability allows remote attackers to cause a denial of service via a contact message containing a large number of contacts, leading to memory consumption and a hang. The connected documents confirm the affected software and the impa...

CVE-2002-1988

CVE-2002-1988 affects Resin 2.1.1. The vulnerability allows remote attackers to cause a denial of service through a request containing long variables targeting non-existent resources, leading to memory consumption and a potential hang of the server. Root cause is tied to processing lengthy query/...

CVE-2002-1988

Resin 2.1.1 allows remote attackers to cause a denial of service memory consumption and hang via a URL with long variables for non-existent resources...

CVE-2002-2075: Undefined Security Weakness

ICQ 2001a and 2002b allows remote attackers to cause a denial of service memory consumption and hang via a contact message with a large contacts number...

CVE-2002-1988: Undefined Security Weakness

Resin 2.1.1 allows remote attackers to cause a denial of service memory consumption and hang via a URL with long variables for non-existent resources...

CVE-2005-2241

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 does not quickly time out Realtime Information Server Data Collection RISDC sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service memory and...