CVE-2012-5977

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

CVE-2012-5977

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

Design/Logic Flaw

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

CVE-2012-5977

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

CVE-2012-5977

CVE-2012-5977 affects Asterisk Open Source 1.8.x <1.8.19.1, 10.x <10.11.1, 11.x <11.1.2 and Certified Asterisk 1.8.11<1.8.11-cert10, plus Asterisk Digiumphones 10.x=1.8.19.1, 10.x >=10.11.1, or 11.x >=11.1.2 (as applicable). Exploitation details or in-the-wild status are not pro...

CVE-2012-5977

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

PT-2013-1867

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 1.8.19.0 Asterisk Open Source versions 10.x through 10.11.0 Asterisk Open Source versions 11.x through 11.1.1 Certified Asterisk version 1.8.11 before 1.8.11-cert10 Asterisk Digiumphones versions...

squid -- denial of service

Squid developers report: Due to missing input validation Squid cachemgr.cgi tool is vulnerable to a denial of service attack when processing specially crafted requests. This problem allows any client able to reach the cachemgr.cgi to perform a denial of service attack on the service host. The...

Siemens Automation License Manager Uncontrolled Resource Consumption

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens Automation License Manager ALM. Siemens ProductCERT has identified an uncontrolled resource consumption vulnerabilitySSA-783261, https://cert-portal.siemens.com/productcert/pdf/ssa-783261.pdf, Web site...

CVE-2012-4841: Undefined Security Weakness

Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service resource consumption via unknown vectors...

PT-2012-5604

Name of the Vulnerable Software and Affected Versions Tivoli Endpoint Manager for Remote Control Broker version 8.2 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, via unknown vectors. Recommendations For version 8.2, update to...

Debian Security Advisory DSA 2563-1 (viewvc)

The remote host is missing an update to viewvc announced via advisory DSA 2563-1. OpenVAS Vulnerability Test $Id: deb25631.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2563-1 viewvc Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2563-1 : viewvc - several vulnerabilities

Several vulnerabilities were found in ViewVC, a web interface for CVS and Subversion repositories. - CVE-2009-5024 Remote attackers can bypass the cvsdb rowlimit configuration setting, and consequently conduct resource-consumption attacks via the limit parameter. - CVE-2012-3356 The remote...

Wireshark 1.8.x < 1.8.3 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.3 advisory. - Buffer overflow in the dissecttlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8...

CVE-2012-3300

IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

CVE-2012-3300: Undefined Security Weakness

IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

Code injection

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

PT-2012-4472

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection UC versions 7.1, 8.0, and 8.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in resource consumption and administration outage, via extended use of the product...

CVE-2012-3096: Undefined Security Weakness

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

[ MDVSA-2012:143 ] python-django

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:143 http://www.mandriva.com/security/ Package : python-django Date : August 23, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...