CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...

CVE-2004-1080

The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...

Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number

Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...

CVE-2004-2390

The roster import functionality in Jabber Gadu-Gadu Transport a.k.a. jabber-gg-transport 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors...

CVE-2004-2318

The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...

CVE-2004-2495

The 1 Webmail, 2 admin, and 3 SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service CPU consumption via a large number of simultaneous connections to the service...

CVE-2004-2315

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...

CVE-2004-1395

The Lithtech engine, as used in 1 Contract Jack 1.1 and earlier, 2 No one lives forever 2 1.3 and earlier, 3 Tron 2.0 1.042 and earlier, 4 F.E.A.R. First Encounter Assault and Recon, and possibly other games, allows remote attackers to cause a denial of service connection refused via a UDP packet...

CVE-2004-0567

The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...

CVE-2004-1907

The Web Filtering functionality in Kerio Personal Firewall KPF 4.0.13 allows remote attackers to cause a denial of service crash by sending hex-encoded URLs containing "%13%12%13"...

CVE-2004-2581

Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."...

Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (2)

// source: https://www.securityfocus.com/bid/12084/info Snort is reported prone to a remote denial of service vulnerability. The vulnerability is reported to exist in the DecodeTCPOptions function of 'decode.c', and is as a result of a failure to sufficiently handle malicious TCP packets. A remot...

MS04-045: WINS Code Execution (870763)

The remote Windows Internet Naming Service WINS server is prone to a heap overflow attack that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet to port 42 of the remote host. C Tenable Network Security,...

Codename Eagle <= 1.42 Socket Unreacheable DoS Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service

// source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneous TCP acknowledgement number is encountered in an active TCP session...

Easy Software Products LPPassWd 1.1.22 - Resource Limit Denial of Service

Easy Software Products LPPassWd 1.1.22 - Resource Limit Denial of Service // source: https://www.securityfocus.com/bid/12005/info Easy Software Products lppasswd is prone to a locally exploitable denial of service vulnerability. This issue occurs when the program attempts to write a file to the...

[SECURITY] [DSA 604-1] New hpsockd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 604-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2004 http://www.debian.org/security/faq -...

CVE-2004-1080

The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...

CVE-2004-0306

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...

CVE-2004-0276

The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...