IBM Director 3.1 Windows Agent Remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory by Juanma Merino Remote DoS on IBM Director 3.1 Agent for Windows Reported to esCERT UPC on: May 2003 no response Vendor contacted on: March 1, 2004 no response Vendor: IBM www.ibm.com Systems Affected: IBM Director 3.1 Agent for...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be restarted to regain normal functionality...

finjanSurfinGate.txt

VENDOR: Finjan www.finjan.com PRODUCT: SurfinGate recently renamed “Vital Security” VERSIONS: All releases of versions 6 & 7 as of 1/22/2004. Older versions have not been tested. NOTIFICATION: The vendor has known of the problem over a year DESCRIPTION...

[CLA-2003:782] Conectiva Security Announcement - xinetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : xinetd SUMMARY : Fixes for memory leaks and other...

Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service

Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service source: https://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are...

Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are handled by the Tomcat HTTP connector, the Tomcat server wil...

DSA-395 tomcat4 - incorrect input handling

Bulletin has no description...

Medieval Total War <= 1.1 broadcast Connection expired

Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: "Connection expired" message to server and connected clients caused by malformed nickname Risk: Low Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org...

DSA-393 openssl - denial of service

Bulletin has no description...

(RHSA-2003:293) openssl security update

OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography library. NISCC testing of implementations of the SSL protocol uncovered two bu...

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the...

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service

source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the service listens on. The service will need to be restarted to regain...

Moderate: Red Hat Security Advisory: apache security update

Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Enterprise Linux. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl which can...

vpop3d Denial Of Service.

Hi, Topic: vpop3d Denial Of service Product: vpop3d Note: This is implemented in several vhost packages, I can't name all of them, but vhost-3.05r3 is one. Vendor Notification: Notified several Vendors about the binary vpop3d that they are using in their packages, Original Author of vpop3d has be...

Checkpoint/Restart Vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Checkpoint/Restart Vulnerability Number : 20030802-01-P Date : August 14, 2003 Reference : CVE CAN-2003-0679 Reference : SGI BUG 894920 Fixed in : IRIX 6.5.22 or patches 5264 through 5269 SGI provides this information freely to the...

CVE-2003-0679

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

IIS WebDav Denial of Service attacks - Update to SPI Dynamics

In SPI Dynamics own advisory it mentions that IIS will restart itself - whilst this is true, by supplying a specific number of bytes, we can terminate all the threads, but leaving INETINFO still alive. Despite INETINFO not dying, the process will no longer serve any requests. This provides a more...

Microsoft IIS 5.0 - WebDAV PROPFIND / SEARCH Method Denial of Service

/ source: https://www.securityfocus.com/bid/7735/info Microsoft Internet Information Services has been reported vulnerable to a denial of service. When WebDAV receives excessively long requests to the 'PROPFIND' or 'SEARCH' variables, the IIS service will fail. All current web, FTP, and email...