CVE-2009-1377

OpenSSL 0.9.8k and earlier contains a DTLS buffering bug in dtls1_buffer_record (ssl/d1_pkt.c) that allows a remote attacker to cause denial of service via memory consumption by queuing a large sequence of DTLS records with a future epoch. The issue is documented in CVE-2009-1377 and tied to the ...

Design/Logic Flaw

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

Memory corruption

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

Mandriva Linux Security Advisory : apache (MDVSA-2008:195)

A vulnerability was discovered in the modproxy module in Apache where it did not limit the number of forwarded interim responses, allowing remote HTTP servers to cause a denial of service memory consumption via a large number of interim responses CVE-2008-2364. A cross-site scripting vulnerabilit...

Mandriva Linux Security Advisory : libid3tag (MDVSA-2008:103)

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service CPU and memory consumption via an ID3FIELDTYPESTRINGLIST field that ends in '', which triggers an infinite loop. The updated packages have been patched to correct this. %NASLMINLEVEL 70300 C...

Ubuntu 7.10 / 8.04 LTS / 8.10 : linux, linux-source-2.6.22 vulnerabilities (USN-751-1)

NFS did not correctly handle races between fcntl and interrupts. A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service. Ubuntu 8.10 was not affected. CVE-2008-4307 Sparc syscalls did not correctly check mmap regions. A local attacker could cause a...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:212)

libxml2 version 2.7.0 and 2.7.1 did not properly handle predefined entities definitions in entities, which allowed context-dependent attackers to cause a denial of service memory consumption and application crash via certain XML documents CVE-2008-4409. The updated packages have been patched to...

Code injection

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

The CVE-2008-6742 entry describes a DoS in Foxy P2P software caused by processing a foxy URI with a download action and an excessively large fs parameter, leading to memory consumption. The vulnerability is network-exploitable, with no authentication required, and the available documents do not s...

Mandriva Update for libid3tag MDVSA-2008:103 (libid3tag)

Check for the Version of libid3tag OpenVAS Vulnerability Test Mandriva Update for libid3tag MDVSA-2008:103 libid3tag Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for ipsec-tools MDVSA-2008:181 (ipsec-tools)

Check for the Version of ipsec-tools OpenVAS Vulnerability Test Mandriva Update for ipsec-tools MDVSA-2008:181 ipsec-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for apache MDVSA-2008:195 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2008:195 apache Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for kernel MDKSA-2007:195 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:195 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for clamav MDVSA-2008:189 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:189 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Baby FTP 1.x Memory Consumption

!/usr/bin/perl Baby FTP Server v1.x Remote Memory Consumption Exploit. ------------------------------------------------------- This can be exploited to use 100% UC. Tested with Windows xp sp2 ------------------------------------------------------- Author: Jonathan Salwan Mail: submit AT...

Squid Proxy Cache ICAP Adaptation Denial of Service Vulnerability

According to its version number, the remote version of Squid is prone to a to a remote denial-of-service vulnerability because the proxy server fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Successfully exploiting this issue allows remote...

Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-509-1

Ubuntu Update for Linux kernel vulnerabilities USN-509-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5091.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-509-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...