Microsoft IIS 5.0 - WebDAV PROPFIND / SEARCH Method Denial of Service

/ source: https://www.securityfocus.com/bid/7735/info Microsoft Internet Information Services has been reported vulnerable to a denial of service. When WebDAV receives excessively long requests to the 'PROPFIND' or 'SEARCH' variables, the IIS service will fail. All current web, FTP, and email...

VisNetic ActiveDefense 1.3.1 - GET Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/7428/info A denial of service vulnerability has been discovered in VisNetic ActiveDefense. The problem occurs when multiple HTTP requests are subsequently made to a server, containing a specific amount of data. After processing these requests, the affecte...

CVE-2002-0173

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...

Microsoft ActiveSync 3.5 - Null Pointer Dereference Denial of Service

Microsoft ActiveSync 3.5 - Null Pointer Dereference Denial of Service // source: https://www.securityfocus.com/bid/7150/info A problem with ActiveSync could make it possible for remote users to trigger a denial of service. It has been reported that under some circumstances, the ActiveSync wcescom...

iCal 3.7 - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/6506/info A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of service condition. Restarting the service...

SmartMail Server 2.0 - Closed Connection Denial of Service

source: https://www.securityfocus.com/bid/6074/info SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly. SmartMail Server will need to be restarted to regain normal functionality. This issue was reported in...

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service source: https://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via...

SmartMail Server 2.0 - Closed Connection Denial of Service

SmartMail Server 2.0 - Closed Connection Denial of Service source: https://www.securityfocus.com/bid/6074/info SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly. SmartMail Server will need to be restarted to...

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service

source: https://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail Server will need to be restarted to...

SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet

source: https://www.securityfocus.com/bid/6043/info A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform. Under some circumstances, it may be possible to crash a vulnerable...

Polycom ViaVideo 2.23.0 - Denial of Service

Polycom ViaVideo 2.23.0 - Denial of Service source: https://www.securityfocus.com/bid/5962/info Polycom ViaVideo devices are prone to a denial of service condition upon receipt of numerous incomplete HTTP requests. This may restrict availability of the device for legitimate users. The device may...

Long URL causes TelCondex SimpleWebServer to crash

Hi! I've found a vulnerability in TelCondex SimpleWebServer 2.06.20817 Build 3128 tested on Windows XP Professional. It could be that prior versions are also affected. It's possible to crash the web server application with a long URL starting from 539 Chars1. You'll see a popup message on the...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (3)

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 3 source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (3)

source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user names. When excessive data is...

DSA-137 mm - insecure temporary files

Bulletin has no description...

Moderate: Red Hat Security Advisory: mod_ssl security update

Updated modssl packages are now available for Red Hat Advanced Server. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL a...

[SECURITY] [DSA-131-2] Apache chunk handling vulnerability, update

Package : apache Problem type : remote DoS / exploit Debian-specific: no CVE name : CAN-2002-0392 CERT advisory : VU944335 The DSA-131-1 advisory for the Apache chunk handling vulnerability contained an error and was missing some essential information: The upstream fix was for the 1.3 series was...

CVE-2002-0173

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...

BEA Systems WebLogic Server and Express 7.0 - Null Character Denial of Service

source: https://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic data to web and wireless application...

DoS in SurfControl's EmailFilter

Just an FYI: I did communicate heavily with SurfControl on this before posting it here: On February 12, 2002, I contacted SurfControl concerning a denial of service condition in the EmailFilter Version 4.0. The DoS was successfully carried out on a Windows 2000 Professional SP2 box. On February 1...