CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

Cisco IOS FTP Server非授权访问及拒绝服务漏洞

Cisco IOS是Cisco网络设备所使用的操作系统。 Cisco IOS所带的FTP Server处理访问请求时存在漏洞，远程攻击者可能利用此漏洞非授权访问系统文件或导致拒绝服务。 启用了IOS FTP Server功能的Cisco IOS没有正确检查用户授权，可能允许攻击者非授权读写设备文件系统中的任意文件，包括设备保存的配置，其中可能有口令或其他敏感信息；此外这种配置的Cisco IOS还可能导致在通过FTP传输文件时IOS重载。 Cisco IOS 12.4 Cisco IOS 12.3 Cisco IOS 12.2 Cisco IOS 12.1 Cisco IOS 12.0...

CVE-2006-7095

Integer signedness error in the networkreceivepacket function in socket.c in dimension 3 engine dim3 1.5 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large datalen value, which is cast to a signed short and results in...

CVE-2006-6227

The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service engine crash via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer dereference...

CVE-2006-6227

The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service engine crash via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer dereference...

CVE-2006-6227

The CVE-2006-6227 issue affects NeoEngine (versions 0.8.2 and earlier) and CVS 3422, where Core::Receive in neonet/core.cpp can be triggered remotely by a message with a large uiMessageLength. This leads to a failed memory allocation and a null pointer dereference, causing a denial of service (en...

CVE-2006-2275

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service deadlock via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."...

PT-2006-3242 · Linux +1 · Linux Sctp +1

Name of the Vulnerable Software and Affected Versions: Linux SCTP lksctp versions prior to 2.6.17 Description: The issue allows remote attackers to cause a denial of service deadlock by sending a large number of small messages to a receiver application that cannot process them quickly enough. Thi...

[NT] Microsoft BizTalk Server ISAPI HTTP Receive Function Buffer Overflow (biztalkhttpreceive.dll)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...