Linux Kernel 2.6.x Firewall Logging Rules Remote DoS Exploit

No description provided by source. / iptables.log.integer.underflow.POC.c CAN-2004-0816, BID11488, SUSE-SA:2004:037 felixzhou at hotmail dot com / include stdio.h include winsock2.h include ws2tcpip.h include time.h pragma commentlib,"ws232" static unsigned char dip4; static unsigned int da; stat...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952: Undefined Security Weakness

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2704: Improper Input Validation

Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2008-1440: Improper Validation of Specified Quantity in Input

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

Fedora 7 : net-snmp-5.4-18.fc7 (2008-5224)

Tue Jun 10 2008 Jan Safranek 5.4-18 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4-17 - fixing ipNetToMediaNetAddress to show IP address 432780 - Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP...

CVE-2008-2056

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

CVE-2008-2057: Undefined Security Weakness

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-0891: Undefined Security Weakness

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

CVE-2008-2423: Undefined Security Weakness

Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635...

CVE-2008-0535: Undefined Security Weakness

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

CVE-2008-2218

Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server MCS before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service crash via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of servic...

CVE-2008-2170: Improper Input Validation

Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2173: Improper Input Validation

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

PT-2008-1134 · Underbit Technologies +1 · Libid3Tag +1

Name of the Vulnerable Software and Affected Versions: libid3tag versions 0.15.0b through 0.15.1b-r1 libid3tag version 0.15.1b-r2 is not affected, so the range is up to 0.15.1b-r1 Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption,...

CVE-2008-2092: Undefined Security Weakness

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

CVE-2008-2003: Undefined Security Weakness

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

CVE-2008-2000: Undefined Security Weakness

Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service application crash via JavaScript code that calls document.write in an infinite loop...

CVE-2008-1979: Undefined Security Weakness

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

CVE-2008-1769: Undefined Security Weakness

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...