CVE-2007-5568: Improper Input Validation

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...

CVE-2007-5570: Improper Input Validation

Cisco Firewall Services Module FWSM 3.21, and 3.15 and earlier, allows remote attackers to cause a denial of service device reload via a crafted HTTPS request, aka CSCsi77844...

CVE-2007-5556: Improper Input Validation

Unspecified vulnerability in the Avaya VoIP Handset allows remote attackers to cause a denial of service reboot via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2003-1364: Improper Input Validation

Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service crash via an HTTP GET message with empty 1 Connection or 2 Range fields...

CVE-2007-5481: Undefined Security Weakness

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

eXtremail <= 2.1.1 memmove() Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl extremail-v3.pl Copyright c 2006 by [email protected] eXtremail =2.1.1 remote root POC x86-lnx by mu-b - Fri Oct 06 2006 Tested on: eXtremail 2.1.1 lnx eXtremail 2.1.0 lnx - Private Source Code -DO NOT DISTRIBUTE -...

S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service

S21Sec Advisory - Title: OPAL SIP Protocol Remote Denial of Service ID: S21SEC-037-en Severity: Medium - Remote DoS History: 11.Jun.2007 Vulnerability discovered 09.Jul.2007 Vendor contacted 15.Aug.2007 Patched 17.Sep.2007 New version released Scope: Remote Denial of Service Platforms: Any...

SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS

SEC Consult Security Advisory 20071012-0 =================================================================================== title: Madwifi xrates element remote DOS program: Madwifi linux wlan driver for atheros chipsets vulnerable version: Madwifi = 0.9.3.2 homepage: www.madwifi.org found: July...

CVE-2007-5448: Improper Input Validation

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2003-1342: Undefined Security Weakness

Trend Micro Virus Control System TVCS 1.8 running with IIS allows remote attackers to cause a denial of service memory consumption in IIS via multiple URL requests for ActiveSupport.exe...

CVE-2007-5435: Undefined Security Weakness

Unspecified vulnerability in CA ERwin Process Modeler formerly AllFusion Process Modeler 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File Datatype Standards File...

CVE-2007-5282: Improper Input Validation

Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service agent process crash via invalid data from clients other than Cosminexus Manager...

CVE-2007-5250: Undefined Security Weakness

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

CVE-2007-3699: Undefined Security Weakness

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

GCALDaemon Remote DoS

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

CVE-2007-4911

CVE-2007-4911 affects JetCast Server 2.0.0.4308 where the DLL JSMP3OGGWt.dll can be triggered remotely to crash the daemon by sending a long ".mp3" URI to TCP port 8000. The description indicates a remote-denial-of-service condition via the network, with no public exploit details provided within ...

jetcast-dos.txt

!/usr/bin/python """ / | \ \ / / | / | '/ \ \ V /| || | | | / / \/|| | | | | ' | '/ / |/ \ ' | / | || | | | | | /\ \ / | | | |\ \ | ./|| ||/|| |||/ || || // \// GENRE: //\PLOIT // PROGRAM: JetCast Server 2.0.0.4308 EXPLOiT TYPE: 0day remote DoS exploit EXPLOiT LANGUAGE: Python DEBUG...

xdiesel-traverse.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : 2K7SEPT6 X-Diesel Unreal Commander v0.92 build 573 multiple FTP-based vulnerabilities Class : Remote directory traversal, Remote DoS Threat level : HIGH Discovered : 2007-09-06 Published : 2007-08-24 Credit : Gynvael Coldwind...

CVE-2007-4635

CVE-2007-4515 and CVE-2007-4635 pertain to Yahoo! Messenger, targeting the YVerInfo.dll ActiveX control. The root cause is a buffer overflow in the ActiveX methods fvCom and info, exploitable by crafted inputs. CVE-2007-4515 describes a pre-8.1.0.419 condition allowing remote code execution; CVE-...