RHEL 4 / 5 : pidgin (RHSA-2008:1023)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1023 advisory. - pidgin: remote DoS via MSN message with crafted file name CVE-2008-2955 - pidgin: unrestricted download of arbitrary files triggered v...

CVE-2008-5563: Undefined Security Weakness

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service device crash via a malformed Extensible Authentication Protocol EAP frame...

CVE-2008-5564: Undefined Security Weakness

Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service daemon crash via a malformed HTTP request...

[IVIZ-08-011] ClamAV lzh unpacking segmentation fault

----------------------------------------------------------------------- iViZ Security Advisory 08-011 10/12/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

CVE-2008-5409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in the pdf.xmd module in 1 BitDefender Free Edition 10 and Antivirus Standard 10, 2 BullGuard Internet Security 8.5, and 3 Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code v...

Microsoft Windows RTCP Unspecified Remote DoS Vulnerability

Microsoft Live Messenger is prone to a remote Denial of Service vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5284: Undefined Security Weakness

The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client aka Radlogin 4.0.20 and earlier, allows remote attackers to cause a denial of...

CVE-2008-5160: Undefined Security Weakness

Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service daemon crash via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."...

CVE-2008-5102

CVE-2008-5102 concerns Zope 2.x up to version 2.11.2, where PythonScripts can be abused by remote authenticated users to cause a denial of service through certain raise or import statements. The OpenVAS entries refer to a Zope 2.11.2 DoS vulnerability and note a vendor fix as the remediation. The...

CVE-2008-5106: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console...

CVE-2008-5017: Undefined Security Weakness

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service crash via unknown vectors...

CVE-2008-5014: Improper Input Validation

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by modifying the window.proto.proto object in a way that...

freeSSHd SFTP 'rename' and 'realpath' Remote DoS Vulnerability

The host is running freeSSHd SSH server and is prone to remote denial of service vulnerability. NULL pointer de-referencing errors in SFTP 'rename' and 'realpath' commands. These can be exploited by passing overly long string passed as an argument to the affected commands. OpenVAS Vulnerability...

freeSSHd SFTP 'rename' and 'realpath' < 1.2.6 Remote DoS Vulnerability

freeSSHd SSH server is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vicftp-dos.txt

include include include define z00roa memseta,0,sizeofa; //greetings : SiD.psycho //Smallest greetings : Gorion - lofamy cIem We want be like y0U : unsigned int setportconst char port ifatoiport==0 || atoiport0 return 21; return atoiport; int mainint argc,char argv...

Titan FTP Server 'SITE WHO' Command Remote DoS Vulnerability

The host is running Titan FTP Server and is prone to denial of service vulnerability. The flaw is due to error in the 'SITE WHO' command processing, which can be exploited to exhaust available CPU resources. OpenVAS Vulnerability Test $Id: secpodtitanftpservercmdprocessingdosvuln900160.nasl 4557...

CVE-2007-4349: Undefined Security Weakness

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

Titan FTP Server < 6.26.631 Remote DoS Vulnerability

Titan FTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-4619: Undefined Security Weakness

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

Exploit for solaris platform in category dos / poc ============================================================== Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS Exploit ============================================================== /...