Design/Logic Flaw

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service CPU and memory consumption via a string containing a large number of characters that are escaped when Monopd produces XML output...

CVE-2006-1046

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service CPU and memory consumption via a string containing a large number of characters that are escaped when Monopd produces XML output...

CVE-2006-0451

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

Code injection

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2005-4504

The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2004-2650

The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...

MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:219 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.1 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...

MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:218 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have...

CVE-2005-3899

CVE-2005-3899 concerns Google Talk’s automatic update mechanism. The vulnerability allows remote attackers to trigger a denial of service by poisoning a target’s DNS cache and forcing a large update file to be processed, which consumes CPU and memory during signature verification. The provided do...

Linux Kernel 2.6.x - Time_Out_Leases PrintK Local Denial of Service

/ source: https://www.securityfocus.com/bid/15627/info Linux kernel is susceptible to a local denial-of-service vulnerability. Local attackers may trigger this issue by obtaining numerous file-lock leases, which will consume excessive kernel log memory. Once the leases timeout, the event will be...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2002-2174

The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...

Apache Input Header Folding and mod_ssl ssl_io_filter_cleanup DoS Vulnerabilities

The remote host appears to be running a version of Apache 2.x which is older than 2.0.50. There is denial of service in apache httpd 2.0.x by sending a specially crafted HTTP request. It is possible to consume arbitrary amount of memory. On 64 bit systems with more than 4GB virtual memory this ma...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

CVE-2005-3467 affects Serv-U FTP Server prior to 6.1.0.4. The vulnerability enables a denial-of-service (crash) via malformed packets and potentially other issues with unknown impact; a second vector involves the use of a tilde (~) in a pathname, and a third involves memory consumption of the dae...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...