GLSA-200804-19 : PHP Toolkit: Data disclosure and Denial of Service

The remote host is affected by the vulnerability described in GLSA-200804-19 PHP Toolkit: Data disclosure and Denial of Service Toni Arnold, David Sveningsson, Michal Bartoszkiewicz, and Joseph reported that php-select does not quote parameters passed to the 'tr' command, which could convert the...

USN-601-1: Squid vulnerability

It was discovered that Squid did not perform proper bounds checking when processing cache update replies. A remote authenticated user may be able to trigger an assertion error and cause a denial of service. This vulnerability is due to an incorrect upstream fix for CVE-2007-6239. CVE-2008-1612...

Livebox TP路由器远程溢出拒绝服务漏洞

BUGTRAQ ID: 28066 Livebox TP是在波兰广泛使用的宽带路由器。 Livebox TP在处理畸形用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Livebox TP中所内嵌的ADI Convergence Galaxy FTP服务器没有正确地验证用户输入参数，如果远程攻击者向路由器的FTP服务发送了特制报文的话，就可能触发缓冲区溢出，导致服务崩溃。 Neostrada Livebox TP 厂商补丁： Neostrada --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-1096

The loadtile function in the XCF coder in coders/xcf.c in 1 ImageMagick 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly...

MyServer 0.8.11 - '204 No Content' error Remote Denial of Service

exploit.py import socket import os print '------------------------------------------------------------------' print ' MyServer 0.8.11 "204 No Content" error Remote Denial of Service' print ' url: www.myserverproject.net' print ' author: shinnai' print ' mail: shinnaiatautisticidotorg' print ' sit...

CVE-2007-6422

The balancerhandler function in modproxybalancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service child process crash via an invalid bb variable...

Microsoft IE已删除帧对象访问拒绝服务漏洞

BUGTRAQ ID: 19228 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理对象引用时存在拒绝服务漏洞，远程攻击者可能利用此漏洞拒绝浏览器崩溃。 如果用户受骗访问了已删除帧中的对象属性的话，就会触发空指针引用，导致IE崩溃。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Appian Business Process Management Suite 5.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/26913/info Appian Business Process Management Suite BPMS is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted packets. Successfully exploiting this issue allows remote attackers to crash the affected applicatio...

DTSA-88-1 net-snmp - denial of service

Bulletin has no description...

DTSA-87-1 openldap2.3 - denial of service

Bulletin has no description...

FreeBSD : py-django -- denial of service vulnerability (d2c2952d-85a1-11dc-bfff-003048705d5a)

Django project reports : A per-process cache used by Django's internationalization 'i18n' system to store the results of translation lookups for particular values of the HTTP Accept-Language header used the full value of that header as a key. An attacker could take advantage of this by sending...

Yahoo! Messenger 8.1 - KDU_V32M.DLL Remote Denial of Service

Yahoo! Messenger 8.1 - KDUV32M.DLL Remote Denial of Service source: https://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This...

Fedora Core 6 : kernel-2.6.22.1-32.fc6 (2007-655)

Rebase kernel to 2.6.22.1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.1 Includes the CFS scheduler from upstream kernel 2.6.23. Fixes since initial 2.6.22 test kernel was released: Fix timer problems and failure to boo...

Microsoft Windows Media Player AU除零拒绝服务漏洞

BUGTRAQ ID: 25236 CNCAN ID:CNCAN-2007080906 Microsoft Media Player是一款媒体播放程序。 Microsoft Media Player不正确处理.au文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 打开恶意构建的.au文件，Media Player会由于除零错误而导致应用程序崩溃，造成拒绝服务攻击。 Microsoft Windows Media Player 11 目前没有解决方案提供： http://www.microsoft.com/windows/windowsmedia/EN/default.asp...

IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow

IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow // source: https://www.securityfocus.com/bid/25075/info IBM AIX is prone to a local, stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input to a program that is installed...

CVE-2007-0040

CVE-2007-0040 affects Microsoft Windows Active Directory’s LDAP service (Windows 2000 Server SP4, Windows Server 2003 SP1/SP2, x64, Itanium variants). The issue is an LDAP request handling flaw related to the number of convertible attributes, enabling remote attackers to crash the service or exec...

CVE-2007-3477

The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...

CVE-2007-3473

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

CVE-2007-3304

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...

CVE-2007-2726

BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...