FTP Explorer 1.0.1 Build 047 - Remote CPU Consumption (Denial of Service)

/ FTP Explorer 1.0.1 Build 047 Remote DoS CPU consumption FTP Explorer is prone to a DoS after receiving a long PWD response leading to 100% CPU consumption. Have Fun! Coded by Marsu / include "winsock2.h" include "stdio.h" include "stdlib.h" include "windows.h" pragma commentlib, "ws232.lib" int...

CVE-2007-0963: Undefined Security Weakness

Unspecified vulnerability in Cisco Firewall Services Module FWSM 3.x before 3.13.3, when set to log at the "debug" level, allows remote attackers to cause a denial of service device reboot by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot durin...

Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)

No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...

Samba file server multiple security vulnerabilities

Solaris nsswinbind.so.1 gethostbyname and nsswinbind.so.1 functions buffer overflow. Remote DoS in smbd with infinite loop. Format string vulnerability in VFS afsacl.so plugin...

Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

Design/Logic Flaw

The wpremotefopen function in WordPress before 2.1 allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint...

CVE-2007-0538: Undefined Security Weakness

Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to 1 a large file, which triggers a long download session without a timeout constraint; or 2 a file with a...

CVE-2007-0533: Undefined Security Weakness

The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build 9.0.12, allows remote attackers to cause a denial of service thread hang or CPU consumption via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController...

CVE-2007-0494

CVE-2007-0494 affects ISC BIND: remote attackers can cause a denial of service via a DNS response to a type ANY query that contains multiple RRsets, triggering an assertion error in DNSSEC validation. Affected software includes BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up t...

CVE-2007-0479: Undefined Security Weakness

Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device...

CVE-2007-0481: Undefined Security Weakness

Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...

CVE-2007-0488: Undefined Security Weakness

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

CVE-2007-0494: Undefined Security Weakness

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0414: Undefined Security Weakness

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service server hang via certain requests that cause muxer threads to block when processing error pages...

CVE-2006-6489: Undefined Security Weakness

The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service application termination and restart via malformed packets...

Cisco IOS Data-link Switching (DLSw) Capabilities Exchange Remote DoS (CSCsf28840)

The remote host is a CISCO router containing a version of IOS that is affected by a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24019; scriptversion"1.19";...

CVE-2006-5876: Undefined Security Weakness

The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...

CVE-2007-0256: Undefined Security Weakness

VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service application crash via a crafted .wmv file...

Apple WebKit build 18794 - WebCore Remote Denial of Service

Apple WebKit build 18794 - WebCore Remote Denial of Service source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the...

tk53-advisory-1.txt

======================================================================== TK53 Advisory 1 01/07/2007 - CenterICQ remote DoS buffer overflow in Livejournal handling ======================================================================== Authors: Lolek of TK53 , Roflek of TK53 Affected program:...