Microsoft Windows XP - '.WAV' File Handler Denial of Service

source: https://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they are processed. If an exploit attempt is successful, the Windo...

Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS

//////////////////////////////////////////////////////////////////// //==================== Security Advisory =====================// //////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- ----- IIS 5.x/6.0 WebDAV...

Microsoft XML Parser Remote Denial of Service Vulnerability

Description Microsoft XML Parser is prone to a remote denial of service vulnerability when handling malformed requests. The vulnerability can be exploited through the WebDAV XML message handler of Microsoft IIS server. It is reported that this issue requires a remote attacker to create specially...

Important: Red Hat Security Advisory: httpd security update

Updated httpd packages that include a security fix for modssl and various enhancements are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An input filter bug in modssl was discovered in Apache httpd version 2.0.50 and earlier. A...

GLSA-200407-12 : Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling

The remote host is affected by the vulnerability described in GLSA-200407-12 Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling An attacker can utilize an erroneous data type in the IPTables TCP option handling code, which lies in an iterator. By making a TCP packet with a header...

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service source: https://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU...

CVE-2004-0744

CVE-2004-0744 is referenced in HP-UX advisories as a remote Denial of Service vulnerability in TCP/IP (Rose/fragment attack). The HP-UX impact concerns B.11.00, B.11.04, B.11.11, and B.11.23 running TCP/IP, with patchesPHNE_30161, PHNE_33427, PHKL_31500 (and related updates) required to mitigate....

Free Web Chat Initial Release - Connection Saturation Denial of Service

Free Web Chat Initial Release - Connection Saturation Denial of Service source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported...

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service // source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerabilit...

Free Web Chat Initial Release - Connection Saturation Denial of Service

source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username dat...

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service

// source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username...

CVE-2004-0478

Unknown versions of Mozilla allow remote attackers to cause a denial of service high CPU/RAM consumption using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U...

resources consumption in DiGi WWW Server

Donato Ferrante Application: DiGi WWW Server http://wwwserver.sourceforge.net Version: Compieuw.1 Bug: resources consumption Date: 27-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

DiGi WWW Server 1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume large amounts of CPU resources. Sinc...

Resources consumption in Goahead webserver <= 2.1.8

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

goahead.txt

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Brilliant Digital Software Detection

Brilliant Digital, a media player that tracks browsing habits, is installed on the remote host. This program has been reported to cause excessive CPU and memory consumption and occasional crashes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11996;...

CVE-2003-1305

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

surfboard-1.1.8.txt

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: From the website: "Surfboard is a trivial web server, written by Meredydd Luff." ======= 2 Bugs ======= Directory traversal ------------------- The webserver checks the dot-dot pattern only if there is a '?' in...

Surfboard <= 1.1.8 vulns

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: = 1.1.8 Platforms: nix Bugs: possibility to view all the files in the system and resources consumption Risk: medium/high Exploitation: remote/easy Date: 01 Dec 2003 Author: Luigi Auriemma e-mail:...