2605 matches found
FreeBSD : py-django -- denial of service vulnerability (d2c2952d-85a1-11dc-bfff-003048705d5a)
Django project reports : A per-process cache used by Django's internationalization 'i18n' system to store the results of translation lookups for particular values of the HTTP Accept-Language header used the full value of that header as a key. An attacker could take advantage of this by sending...
Yahoo! Messenger 8.1 - KDU_V32M.DLL Remote Denial of Service
Yahoo! Messenger 8.1 - KDUV32M.DLL Remote Denial of Service source: https://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This...
Fedora Core 6 : kernel-2.6.22.1-32.fc6 (2007-655)
Rebase kernel to 2.6.22.1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.1 Includes the CFS scheduler from upstream kernel 2.6.23. Fixes since initial 2.6.22 test kernel was released: Fix timer problems and failure to boo...
Microsoft Windows Media Player AU除零拒绝服务漏洞
BUGTRAQ ID: 25236 CNCAN ID:CNCAN-2007080906 Microsoft Media Player是一款媒体播放程序。 Microsoft Media Player不正确处理.au文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 打开恶意构建的.au文件，Media Player会由于除零错误而导致应用程序崩溃，造成拒绝服务攻击。 Microsoft Windows Media Player 11 目前没有解决方案提供： http://www.microsoft.com/windows/windowsmedia/EN/default.asp...
IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow
IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow // source: https://www.securityfocus.com/bid/25075/info IBM AIX is prone to a local, stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input to a program that is installed...
CVE-2007-0040
CVE-2007-0040 affects Microsoft Windows Active Directory’s LDAP service (Windows 2000 Server SP4, Windows Server 2003 SP1/SP2, x64, Itanium variants). The issue is an LDAP request handling flaw related to the number of convertible attributes, enabling remote attackers to crash the service or exec...
CVE-2007-3477
The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...
CVE-2007-3473
The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...
CVE-2007-3304
Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...
CVE-2007-2726
BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...
CVE-2007-2437
The X render Xrender extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service daemon crash via crafted values to the 1 XRenderCompositeTrapezoids and 2 XRenderAddTraps functions, which trigger a...
Mozilla Firefox 2.0.0.3 - Href Denial of Service
source: https://www.securityfocus.com/bid/23747/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits can allow attackers to crash the affected browser,...
CVE-2007-0720
The CUPS service on multiple platforms allows remote attackers to cause a denial of service service hang via a "partially-negotiated" SSL connection, which prevents other requests from being accepted...
KSirc: Denial of Service vulnerability
Background KSirc is the default KDE IRC client. Description KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact A malicious IRC server could send a long PRIVMSG string to the KSirc client causing an assertion failure and the...
Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)
Citrix Metaframe Presentation Server Print Provider - Buffer Overflow PoC / Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an...
CVE-2007-0247
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...
Sun Solaris 9 - RPC Request Denial of Service
Sun Solaris 9 - RPC Request Denial of Service // source: https://www.securityfocus.com/bid/21964/info The Solaris operating system is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the 'rpcbind1M' server, denying service to legitimate users. /...
CVE-2006-6318
The showeloglist function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service daemon crash by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference. NOTE: some of these details are obtained from...
CVE-2006-5783
Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service crash via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not...