CVE-2004-2654

The clientAbortBody function in clientside.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer...

Debian DSA-608-1 : zgv - integer overflows, unsanitised input

Several vulnerabilities have been discovered in zgv, an SVGAlib graphics viewer for the i386 architecture. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2004-1095 'infamous41md' discovered multiple integer overflows in zgv. Remote exploitation of an...

CVE-2004-0361

The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service segmentation fault by creating a new Array object with a large size value, then writing into that array...

[Full-Disclosure] bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 bogofilter-SA-2004-01 rfc2047crash Topic: vulnerability in bogofilter/bogolexer Announcement: bogofilter-SA-2004-01 Writer: Matthias Andree Version: 1.00 CVE id: none yet Announced: 2004-10-30 Category: vulnerability Type: segmentation fault through...

DEBIAN-CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

DSA-558-1 libapache-mod-dav - null pointer dereference

Bulletin has no description...

squid -- SNMP module denial-of-service vulnerability

The Squid-2.5 patches page notes: If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via "make config". As a workaround, SNMP can be disabled by defining "snmpport 0" in squid.conf...

Debian DSA-425-1 : tcpdump - multiple vulnerabilities

Multiple vulnerabilities were discovered in tcpdump, a tool for inspecting network traffic. If a vulnerable version of tcpdump attempted to examine a maliciously constructed packet, a number of buffer overflows could be exploited to crash tcpdump, or potentially execute arbitrary code with the...

Apache 2, mod_dav: Multiple vulnerabilities

Background The Apache HTTP server is one of most popular web servers on the internet. modssl provides SSL v2/v3 and TLS v1 support for it and moddav is the Apache module for Distributed Authoring and Versioning DAV. Description A potential infinite loop has been found in the input filter of modss...

Apache 2.0.x < 2.0.51 Multiple Vulnerabilities (OF, DoS)

According to its Server response header, the remote host is running a version of Apache 2.0.x prior to 2.0.51. It is, therefore, affected by multiple vulnerabilities : - An input validation issue in apr-util can be triggered by malformed IPv6 literal addresses and result in a buffer overflow...

security flaw

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

GNU Info 4.7 - Follow XRef Buffer Overrun

source: https://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info command. An attacker may exploit this...

GNU Info 4.7 - Follow XRef Buffer Overrun

GNU Info 4.7 - Follow XRef Buffer Overrun source: https://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2004:008)

A number of vulnerabilities were discovered in tcpdump versions prior to 3.8.1 that, if fed a maliciously crafted packet, could be exploited to crash tcpdump or potentially execute arbitrary code with the privileges of the user running tcpdump. These vulnerabilities include : An infinite loop and...

Mandrake Linux Security Advisory : proftpd (MDKSA-2002:005)

Matthew S. Hallacy discovered that ProFTPD was not forward resolving reverse-resolved hostnames. A remote attacker could exploit this to bypass ProFTPD access controls or have false information logged. Frank Denis discovered that a remote attacker could send malicious commands to the ProFTPD serv...