CVE-2006-4408

CVE-2006-4408 : Apple Mac OS X 10.4–10.4.8 contains a vulnerability in the Security Framework that allows remote attackers to cause a denial of service (resource consumption) by using certain public key values in an X.509 certificate that require extra resources during signature verification. The...

CVE-2006-5553

Cisco Security Agent (CSA) for Linux is affected in 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as deployed with Unified CallManager (CUCM) and Unified Presence Server (CUPS). The issue allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain opt...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Summary: CVE-2006-5445 affects the SIP channel driver (channels/chan_sip.c) in Asterisk. Affected versions are Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3. Impact: remote attackers can cause a denial of service through resource consumption by triggering creation of a real pvt struct...

CVE-2003-1305

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

Cybuzu Garoon 2.1.0 - Multiple SQL Injections Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-4272

Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service resource consumption via a large number of requests to register.php. NOTE: the vendor has disputed this vulnerability, stating "If you have the CAPTCHA enabled then the registrations...

CVE-2006-4272

Jelsoft vBulletin 3.5.4 is affected: remote attackers can register multiple arbitrary users via the register.php endpoint, causing resource consumption/DoS. The issue is disputed by the vendor, who notes CAPTCHA can block registrations. Public details specify the vulnerability is triggered by a f...

CVE-2004-2662

The CVE-2004-2662 entry concerns Soft3304 04WebServer prior to 1.41. The vulnerability is a denial of service: sending certain data related to OpenSSL can cause a thread to terminate while resources remain allocated, potentially leading to resource exhaustion. Publicly available details are limit...

CVE-2005-4650

Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service resource consumption via a large number of Search Mambots...

GLSA-200512-02 : Webmin, Usermin: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200512-02 Webmin, Usermin: Format string vulnerability Jack Louis discovered that the Webmin and Usermin 'miniserv.pl' web server component is vulnerable to a Perl format string vulnerability. Login with the supplied username is...

cgi.rb

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...

CVE-2005-3145

httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...

CVE-2005-3145

httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...

Linux kernel fget() DoS

sockfdput call is missed in routingioctl, leading to resource consumption and system crash...

CVE-2005-2815

The CVE-2005-2815 entry describes a vulnerability in FlatNuke 2.5.6 where print.php can disclose path information on error or be abused to trigger a denial‑of‑service by supplying an MS‑DOS device name (AUX/CON/PRN/COM1/LPT1) in the news parameter. Affected product: FlatNuke 2.5.6; vulnerability ...