CVE-2008-3281

libxml2 up to version 2.6.32 is affected by CVE-2008-3281 due to improper detection of recursion during entity expansion in an attribute value, enabling a denial-of-service via crafted XML (memory and CPU consumption). The Gentoo GLSA confirms this, and recommends upgrading to libxml2 >= 2.7.2...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

Important: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionalit...

libxml2 denial of service

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3502

CVE-2008-3502 affects Best Practical Solutions RT versions 3.0.0 through 3.6.6. The vulnerability is described as an unspecified issue related to the Perl Devel::StackTrace module that allows remote authenticated users to cause a denial of service via unspecified vectors, potentially consuming CP...

WinRemotePC Full+Lite 2008 r.2server Denial of Service Exploit

No description provided by source. include stdio.h include stdlib.h include sys/socket.h include sys/types.h include netinet/in.h include string.h include malloc.h include sys/stat.h include fcntl.h define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption...

winremote-dos.txt

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

WinRemotePC Full+Lite 2008 r.2server - Denial of Service include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 200...

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

rPSA-2008-0217-1 vsftpd

rPath Security Advisory: 2008-0217-1 Published: 2008-07-08 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Non-deterministic Denial of Service Updated Versions: vsftpd=conary.rpath.com@rpl:1/2.0.3-13.4-1 rPath Issue Tracking System:...

DEBIAN-CVE-2008-3134

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

CVE-2008-2372

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service memory consumption via a large number of calls to the getuserpages function, which lacks a ZEROPAGE optimization and results in allocation of "useless newly zeroed pages."...

CVE-2008-2372

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service memory consumption via a large number of calls to the getuserpages function, which lacks a ZEROPAGE optimization and results in allocation of "useless newly zeroed pages."...

CVE-2008-2372

CVE-2008-2372 affects the Linux kernel versions 2.6.24 and 2.6.25 before 2.6.25.9. The root cause is a lack of ZERO_PAGE optimization in get_user_pages, causing the allocation of many useless newly zeroed pages and enabling a local user to trigger a denial of service through memory exhaustion. Th...

CVE-2008-2372

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service memory consumption via a large number of calls to the getuserpages function, which lacks a ZEROPAGE optimization and results in allocation of "useless newly zeroed pages."...

PT-2008-3853 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.24 and 2.6.25 through 2.6.25.8 Description: The issue allows local users to cause a denial of service, resulting in memory consumption. This is achieved through a large number of calls to the get user pages function,...

vsftpd 2.0.5 (CWD) Remote Memory Consumption Exploit (post auth)

No description provided by source. !/usr/bin/perl -w vsftpd 2.0.5 FTP Server on Red Hat Enterprise Linux RHEL 5, Fedora 6 to 8, Foresight Linux, rPath Linux is prone to Denial-of-ServiceDoS vulnerability. Can be xploited by large number of CWD commands to vsftp daemon with denyfile configuration...

vsftpd 2.0.5 - CWD (Authenticated) Remote Memory Consumption

vsftpd 2.0.5 - CWD Authenticated Remote Memory Consumption !/usr/bin/perl -w vsftpd 2.0.5 FTP Server on Red Hat Enterprise Linux RHEL 5, Fedora 6 to 8, Foresight Linux, rPath Linux is prone to Denial-of-ServiceDoS vulnerability. Can be xploited by large number of CWD commands to vsftp daemon with...

vsftpd 2.0.5 (CWD) Remote Memory Consumption Exploit (post auth)

Exploit for linux platform in category dos / poc ================================================================ vsftpd 2.0.5 CWD Remote Memory Consumption Exploit post auth ================================================================ !/usr/bin/perl -w vsftpd 2.0.5 FTP Server on Red Hat...

CVE-2008-2364

The approxyhttpprocessresponse function in modproxyhttp.c in the modproxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service memory consumption via a large number of interim...