RHEL 3 : less (RHSA-2005:068)

An updated less package that fixes segmentation fault when viewing binary files is now available. The less utility is a text file browser that resembles more, but has extended capabilities. Victor Ashik discovered a heap based buffer overflow in less, caused by a patch added to the less package i...

CVE-2004-0999

zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...

CVE-2004-1761

Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service segmentation fault via a malformed color filter file...

CVE-2004-2217

Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service segmentation fault via unknown vectors...

CVE-2004-2758

Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service segmentation fault and process crash, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2004-0999

CVE-2004-0999 affects zgv, a graphics viewer for SVGAlib. The Debian advisories (DSA-608-1) describe a remote vulnerability where malicious multiple-image (animated) GIFs can cause a segmentation fault in zgv, effectively a denial of service. The issue is one of several in the Debian advisory; th...

CVE-2004-1897

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service segmentation fault by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read...

CVE-2004-2654

The clientAbortBody function in clientside.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer...

CVE-2004-1897

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service segmentation fault by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read...

CVE-2004-0999: Undefined Security Weakness

zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...

Debian DSA-608-1 : zgv - integer overflows, unsanitised input

Several vulnerabilities have been discovered in zgv, an SVGAlib graphics viewer for the i386 architecture. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2004-1095 'infamous41md' discovered multiple integer overflows in zgv. Remote exploitation of an...

CVE-2004-0361

The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service segmentation fault by creating a new Array object with a large size value, then writing into that array...

[Full-Disclosure] bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 bogofilter-SA-2004-01 rfc2047crash Topic: vulnerability in bogofilter/bogolexer Announcement: bogofilter-SA-2004-01 Writer: Matthias Andree Version: 1.00 CVE id: none yet Announced: 2004-10-30 Category: vulnerability Type: segmentation fault through...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

DEBIAN-CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

DSA-558-1 libapache-mod-dav - null pointer dereference

Bulletin has no description...

Debian DSA-425-1 : tcpdump - multiple vulnerabilities

Multiple vulnerabilities were discovered in tcpdump, a tool for inspecting network traffic. If a vulnerable version of tcpdump attempted to examine a maliciously constructed packet, a number of buffer overflows could be exploited to crash tcpdump, or potentially execute arbitrary code with the...

squid -- SNMP module denial-of-service vulnerability

The Squid-2.5 patches page notes: If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via "make config". As a workaround, SNMP can be disabled by defining "snmpport 0" in squid.conf...