RHEL 3 : openldap (RHSA-2007:0430)

A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protoc...

openldap security update

CentOS Errata and Security Advisory CESA-2007:0430 A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open sourc...

Low: Red Hat Security Advisory: openldap security and bug-fix update

A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protoc...

freeradius -- EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability

The freeradius development team reports: A malicious 802.1x supplicant could send malformed Diameter format attributes inside of an EAP-TTLS tunnel. The server would reject the authentication request, but would leak one VALUEPAIR data structure, of approximately 300 bytes. If an attacker performe...

FreeCiv Civilization game clone DoS

Out of memory reference...

Multiple libtiff security vulnerabilities

Denial of service via a TIFF image that triggers errors in the TIFFFetchAnyArray function in tifdirread.c; certain "codec cleanup methods" in tiflzw.c, tifpixarlog.c, and tifzip.c; and improper restoration of setfield and getfield methods in cleanup functions within tifjpeg.c, tifpixarlog.c,...

GLSA-200603-11 : Freeciv: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200603-11 Freeciv: Denial of Service Luigi Auriemma discovered that Freeciv could be tricked into the allocation of enormous chunks of memory when trying to uncompress malformed data packages, possibly leading to an out of memory...

Linux Kernel 2.6.x - File Lock Lease Local Denial of Service

/ source: https://www.securityfocus.com/bid/15745/info Linux kernel is susceptible to a local denial-of-service vulnerability. This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem stems from a memory leak in the kernel's file-lock lease code...

Linux Kernel 2.6.x - File Lock Lease Local Denial of Service

Linux Kernel 2.6.x - File Lock Lease Local Denial of Service / source: https://www.securityfocus.com/bid/15745/info Linux kernel is susceptible to a local denial-of-service vulnerability. This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem...

Linux kernel drivers buffer overflows

Buffer overflow, out-of-memory references in Yealink and i2c drivers...

Acunetix HTTP Sniffer - Denial of Service

!/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: www.acunetix.com $ARGC=@ARGV; if $ARGC !=2 print "\n"; print " Acunetix HTTP Sniffer DOS Exploit\n"; print...

DzSoft PHP Editor 3.1.2.8 - Denial of Service

DzSoft PHP Editor 3.1.2.8 - Denial of Service !/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor...

CVE-2005-0255

String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstringCharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execut...

CVE-2005-0255

String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstringCharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execut...

Apache - Arbitrary Long HTTP Headers Denial of Service (Perl)

Apache - Arbitrary Long HTTP Headers Denial of Service Perl /usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html version: apache 2 newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "new error$@\n"; binmode$sock; $hostname="Host:...

Apache - Arbitrary Long HTTP Headers (Denial of Service)

/usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html version: apache 2 newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "new error$@\n"; binmode$sock; $hostname="Host: $host"; $buf2='A'x50; $buf4='A'x8183; $len=length$buf2; $buf="GE...

WapServ 1.0 - Denial of Service

WapServ 1.0 - Denial of Service source: https://www.securityfocus.com/bid/8472/info WapServ has been reported prone to multiple remote denial of service vulnerabilities. The issues present themselves when malicious data is received and processed over ports 9200 and 9201. A remote attacker may...

Microsoft IIS/5.0 Content-Length DoS (proved)

Well, finally I have done testing about and I have made a 1gb RAM server to get Out Of Virtual Memory and basically unusable with one script that uses the flaw exposed on the other mails. I suppose that now it's a real security bug. Thanks Ivan Hernandez...