CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...

CVE-2010-4535: Improper Input Validation

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...

Design/Logic Flaw

MyBB aka MyBulletinBoard before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service resource consumption by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php...

CVE-2010-4629

MyBB aka MyBulletinBoard before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service resource consumption by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php...

CVE-2010-4628

CVE-2010-4628 affects MyBB (MyBulletinBoard) prior to 1.4.12. A superfluous SQL COUNT call in member.php allows remote attackers to cause resource consumption by triggering scans of the entire users table, leading to DoS. The referenced sources indicate the vulnerability, with no explicit exploit...

CVE-2010-4628: Undefined Security Weakness

member.php in MyBB aka MyBulletinBoard before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service resource consumption by making requests to member.php that trigger scans of the entire users table...

PT-2010-5593

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.4.12 Description The issue allows remote attackers to cause a denial of service by consuming resources. This is achieved by submitting join request forms for moderated groups using guest access. The problem is related ...

CVE-2010-4629: Undefined Security Weakness

MyBB aka MyBulletinBoard before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service resource consumption by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php...

CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...

CVE-2010-4545

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

Code injection

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

CVE-2010-4545

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

PT-2010-5527

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in resource consumption and sync outage, by syncing a large volume of data. Recommendations For...

CVE-2010-4545: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

CVE-2010-3858: Uncontrolled Resource Consumption

The setupargpages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIGSTACKGROWSDOWN is used, does not properly restrict the stack memory consumption of the 1 arguments and 2 environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of...

Fedora Update for sblim-sfcb FEDORA-2010-10323

Check for the Version of sblim-sfcb OpenVAS Vulnerability Test Fedora Update for sblim-sfcb FEDORA-2010-10323 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

USN-960-1: libpng vulnerabilities

It was discovered that libpng did not properly handle certain malformed PNG images. If a user or automated system were tricked into opening a crafted PNG file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

Fedora 11 : libpng10-1.0.53-1.fc11 (2010-3414)

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned...

Fedora 12 : libpng10-1.0.53-1.fc12 (2010-3375)

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned...

Fedora 13 : libpng10-1.0.53-1.fc13 (2010-2988)

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned...