OTRS < 3.0.0-beta7 Ticket Age Remote DoS Vulnerability

Open Ticket Request System OTRS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2013-5581

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS affected versions not specified Description The issue is related to the authentication manager process in the web framework, which does not properly handle user tokens. This allows remote attackers to caus...

CVE-2013-5497: Improper Authentication

The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...

CVE-2013-5140: Improper Input Validation

The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service assertion failure and device restart via an invalid packet fragment...

CVE-2013-4202

The 1 backup api/contrib/backups.py and 2 volume transfer contrib/volumetransfer.py APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an...

CVE-2013-5720

Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-5722: Undefined Security Weakness

Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2013-5748

Name of the Vulnerable Software and Affected Versions Gretech GOM Media Player version 2.2.53.5169 and possibly earlier Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted WAV file. Recommendations For Gretech GOM Media Play...

CVE-2013-2791: Improper Restriction of Operations within the Bounds of a Memory Buffer

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

CVE-2013-4124 samba nttrans dos private exploit

Hi Forks! It's my samba private exploit and article of it. the security bug occurs while nttrans reply in samba daemon source code tree. the remote dos exploit that i copied from another nttrans exploit in 2003. and can't test it yet, check it out! CVE-2013-4124 samba dos private exploit: -...

CVE-2013-3388: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

CVE-2013-3459: Undefined Security Weakness

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3461: Undefined Security Weakness

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-2801: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

Samba 3.5.223.6.174.0.8 - nttrans Reply Integer Overflow

Samba 3.5.223.6.174.0.8 - nttrans Reply Integer Overflow Exploitation: samba nttrans reply integer overflow / \ / \ | || | | | \ / / . || | | | / | handlenttrans +- callnttransactcreate // transact! - readnttrnsealistvulnerable function security bug analyze smbd/nttrans.c ---- snip ---- snip ----...

CVE-2013-2800: Undefined Security Weakness

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

CVE-2013-2175: Improper Input Validation

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...

CVE-2013-3182: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Windows NAT Driver aka winnat service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service memory corruption and system hang via crafted packets, aka "Windows NAT Denial o...

CVE-2013-2796: Undefined Security Weakness

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...

PT-2013-5170

Name of the Vulnerable Software and Affected Versions SurgeFTP versions prior to 23d2 Description The issue is caused by a buffer overflow that occurs when a long string is sent within the authentication request, potentially allowing remote attackers to cause a denial of service or possibly execu...