CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (2)

// source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a failure to sufficiently handle malicious TCP packets. A remot...

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service (2)

Snort 2.12.2 - DecodeTCPOptions Remote Denial of Service 2 // source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

MySQL MaxDB 7.5 - WAHTTP Server Remote Denial of Service

MySQL MaxDB 7.5 - WAHTTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/11843/info A remote denial of service vulnerability has been reported to affect the MySQL MaxDB WAHTTP server. This issue is due to a failure of the server to handle malformed requests. An attacker...

CVE-2004-1123

CVE-2004-1123 affects Darwin Streaming Server 5.0.1 (and possibly earlier) where a DESCRIBE request containing a null-byte location may crash the server, causing a denial of service. The vulnerability is remote and unauthenticated, leading to a partial availability impact as noted in the CVSS vec...

CVE-2004-1101

The CVE-2004-1101 entry concerns MailPost 5.1.1sv (and possibly earlier) and documents three issues: (1) remote denial of service causing a server crash, (2) leakage of sensitive pathname information in error messages, and (3) a cross-site scripting (XSS) vector triggered by an HTTP request conta...

CVE-2004-0810

Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service server process crash via a certain data string that is sent to multiple simultaneous client connections to TCP port 407...

CVE-2004-1035

Multiple integer signedness errors in 1 imapcommon.c, 2 main.c, 3 request.c, and 4 select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service server crash and possibly leak sensitive information via certain literal values that are not properly handled when usin...

CVE-2004-1035

Multiple integer signedness errors in 1 imapcommon.c, 2 main.c, 3 request.c, and 4 select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service server crash and possibly leak sensitive information via certain literal values that are not properly handled when usin...

CVE-2004-1035

CVE-2004-1035 affects up-imapproxy IMAP proxy version 1.2.2. The vulnerability is described as multiple integer signedness errors in imapcommon.c, main.c, request.c, and select.c, allowing remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via cer...

[Full-Disclosure] [Advisory + Exploit] NetNote Server 2.2, Remote Crafted String Vulnerability

/ NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage - http://www.alshare.com/ NetNote is the...

[Full-Disclosure] Format string bug in Army Men RTS

Luigi Auriemma Application: Army Men RTS http://www.3do.com/armymen/armymen/ Versions: 1.0 Platforms: Windows Bug: format string Exploitation: remote, versus server Date: 14 November 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3...

NetNote Server 2.2 build 230 - Crafted String Denial of Service

NetNote Server 2.2 build 230 - Crafted String Denial of Service / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE...

Moderate: Red Hat Security Advisory: freeradius security update

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available for Red Hat Enterprise Linux 3. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for...

security flaw

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

RealVNC DoS

More than 60 concurrent TCP connections causes server to crash...

Debian DSA-562-1 : mysql - several vulnerabilities

Several problems have been discovered in MySQL, a commonly used SQL database on Unix servers. The following problems have been identified by the Common Vulnerabilities and Exposures Project : - CAN-2004-0835 Oleksandr Byelkin noticed that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the...

CVE-2004-0938

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

[GLSA-200411-01] ppp: Remote denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-01 ppp: Remote denial of service vulnerability The pppd server improperly verifies header fields, making it vulnerable to denial of service attacks. Impact An attacker can cause the pppd server to access memory that it isn'...