CVE-2008-2173: Improper Input Validation

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

PT-2008-1134 · Underbit Technologies +1 · Libid3Tag +1

Name of the Vulnerable Software and Affected Versions: libid3tag versions 0.15.0b through 0.15.1b-r1 libid3tag version 0.15.1b-r2 is not affected, so the range is up to 0.15.1b-r1 Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption,...

CVE-2008-2092: Undefined Security Weakness

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

CVE-2008-2003: Undefined Security Weakness

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

CVE-2008-2000: Undefined Security Weakness

Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service application crash via JavaScript code that calls document.write in an infinite loop...

CVE-2008-1979: Undefined Security Weakness

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

CVE-2008-1769: Undefined Security Weakness

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1897: Improper Authentication

The IAX2 channel driver chaniax2 in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow...

CVE-2008-1387: Undefined Security Weakness

ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

Veritas Storage Foundation Multiple Service Remote DoS (SYM08-004)

Veritas Storage Foundation, a storage management solution from Symantec is installed on the remote host. The installed version is reportedly affected by a denial of service vulnerability. By sending specially crafted IP packets to TCP port 4888, an unauthenticated attacker may be able to cause a...

CVE-2008-1797: Undefined Security Weakness

Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service freeze via a crafted URL...

Openfire < 3.5.0 Queue Handling Remote DoS

Binary data 4463.prm...

CVE-2008-1762: Undefined Security Weakness

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2007-5406: Undefined Security Weakness

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

CVE-2008-1707: Undefined Security Weakness

IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a packet with an 0x11 value in a certain "type" field...

CVE-2008-1708: Undefined Security Weakness

IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service daemon exit via a packet with a large value in this field...

CVE-2008-0711: Undefined Security Weakness

Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors iLO-2 MP, as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model bl860c, allows remote attackers to cause a denial of service via unknown vectors...

CVE-2008-1648: Improper Input Validation

Sympa before 5.4 allows remote attackers to cause a denial of service daemon crash via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information...

Sympa < 5.4 Content-Type Header Remote DoS

Binary data 4454.prm...

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service Memory Corruption Vulnerabilities

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service Memory Corruption Vulnerabilities source: https://www.securityfocus.com/bid/28505/info SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities. Attackers can exploit these issues to crash...