[VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability

Veritas Backup Exec Agent Error Status Remote DoS Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=271&type=vulnerabilities June 23, 2005 I. BACKGROUND VERITAS Backup Exec is an advanced backup and restore solution for Microsoft Windows server...

CVE-2002-1743

Technical details about CVE-2002-1743 are not provided in the supplied documents. No concrete information on affected components or impact is available here; monitor for updates.

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...

gaim -- MSN Remote DoS vulnerability

The GAIM team reports: Remote attackers can cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error...

Tcpdump bgp_update_print Remote Denial of Service Exploit

No description provided by source. / 2005-05-31: Modified by [email protected] to test tcpdump infinite loop vulnerability. libnet 1.1 Build a BGP4 update message with what you want as payload Copyright c 2003 Fr d ric Raynal pappy at security-labs organization All rights reserved. Examples: empt...

Web Server GET Request Saturation Remote DoS

The remote web server shuts down temporarily or blacklists us when it receives several GET HTTP/1.0 requests in a row. This might trigger false positives in generic destructive or DoS plugins. Nessus enabled some countermeasures, however they might be insufficient. C Tenable Network Security, Inc...

Delegate Compressed DNS Packet Remote DoS

Binary data 2936.prm...

CVE-2004-2029

BNBT BitTorrent Tracker, Beta 7.5 Release 2 and earlier, is affected by a vulnerability in Util_DecodeHTTPAuth where a remote attacker can trigger a crash (denial of service) by sending a crafted HTTP Basic Authorization header containing the value "A==". No remediation details are provided in th...

AOL Instant Messenger Font Tag sml Parameter Remote DoS

Binary data 2888.prm...

gaim -- MSN remote DoS vulnerability

The GAIM team reports: Potential remote denial of service bug resulting from not checking a pointer for non-NULL before passing it to strncmp, which results in a crash. This can be triggered by a remote client sending an SLP message with an empty body...

CVE-2005-1464

Multiple unknown vulnerabilities in the 1 KINK, 2 L2TP, 3 MGCP, 4 EIGRP, 5 DLSw, 6 MEGACO, 7 LMP, and 8 RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service infinite loop...

USN-111-1: Squid vulnerability

A remote Denial of Service vulnerability has been discovered in Squid. If the remote end aborted the connection during a PUT or POST request, Squid tried to free an already freed part of memory, which eventually caused the server to crash...

SurgeFTP < 2.2m2 LEAK Command Remote DoS

Binary data 2802.prm...

Lotus Domino Server < 6.5.3 Web Service Remote DoS

Binary data 2800.prm...

gaim -- remote DoS on receiving certain messages over IRC

The GAIM team reports: The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via...

gaim -- remote DoS on receiving malformed HTML

The GAIM team reports: The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read...

Cisco IOS IPv6 Packet Processing Remote DoS (CSCed40933)

The remote version of IOS is vulnerable to a denial of service attack when processing malformed IPv6 packets. If IPv6 is enabled, an attacker may exploit this flaw to prevent the router from working properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17629;...

WU-FTPD FTP Server File Globbing Remote DoS

Binary data 2746.prm...

Apache < 2.0.50 Input Header Folding and mod_ssl DoS

Binary data 2744.prm...

HP-UX PHSS_30650 : HP-UX Running Apache, Remote Denial of Service (DoS) (HPSBUX01019 SSRT4717 rev.3)

s700800 11.04 Webproxy server 2.0 update : Two potential security vulnerabilities have been identified in OpenSSL by NISCC 224012/1 and 224012/2. The Common Vulnerabilities and Exposures project has referenced them as the following CAN-2004-0079, and CAN-2004-0112. The CERT summary is TA04-078A. ...