Debian DSA-1195-1 : openssl096 - denial of service (multiple)

Multiple vulnerabilities have been discovered in the OpenSSL cryptographic software package that could allow an attacker to launch a denial of service attack by exhausting system resources or crashing processes on a victim's computer. - CVE-2006-3738 Tavis Ormandy and Will Drewry of the Google...

Several home malicious code-vulnerability warning-the black bar safety net

Here to say a few page malicious code:"not is to let everybody put these code into your homepage! Just want everyone to be able to understand the malicious code, play a better protective effect!" A, The Loop code: "Put the following code added to the page, you can achieve the above effects" img...

Unixware mountd DoS

Multiple connections lead to system resources exhaustion...

Konqueror fails to restrict access to Java classes

Overview The Konqueror web browser may allow Java applets and JavaScripts to bypass the Java security settings and access restricted Java classes. Exploitation may allow a remote attacker to read and write arbitrary files on a vulnerable system. Description Konqueror is a web browser and file...

Potential Remote Denial of Service

Summary: A remote attacker could cause and smbd process to consume abnormal amounts of system resources due to an input validation error when matching filenames containing wildcard characters. Patch Availability A patch for Samba 3.0.7 samba-3.0.7-CAN-2004-0930.patch is available from...

samba -- potential remote DoS vulnerability

Karol Wiesek at iDEFENSE reports: A remote attacker could cause an smbd process to consume abnormal amounts of system resources due to an input validation error when matching filenames containing wildcard characters. Although samba.org classifies this as a DoS vulnerability, several members of th...

Microsoft Windows XP - explorer.exe .tiff Image Denial of Service

Microsoft Windows XP - explorer.exe .tiff Image Denial of Service source: https://www.securityfocus.com/bid/11202/info Explorer.exe that ships with Microsoft Windows XP prior to Windows XP SP2 is reported prone to a denial of service vulnerability. The vulnerability is reported to exist when...

[NT] Agnitum Outpost Firewall Pro DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service // source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

Better Basket Pro 3.0 Store Builder - Full Path Disclosure source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources...

WSMP3 0.0.x - Remote Information Disclosure

WSMP3 0.0.x - Remote Information Disclosure source: https://www.securityfocus.com/bid/7642/info A vulnerability has been reported in WsMp3. The problem occurs due to insufficient sanitization of HTTP GET requests. As a result, an attacker may be capable of accessing the contents of sensitive syst...

HappyMall E-Commerce Software 4.34.4 - Member_HTML.cgi Command Execution

HappyMall E-Commerce Software 4.34.4 - MemberHTML.cgi Command Execution source: https://www.securityfocus.com/bid/7530/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the memberhtml.cgi script. This...

HappyMall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' Command Execution

source: https://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This could lead to attacks against system resources. HappyMail explo vulnerabl...

iDEFENSE Security Advisory 04.08.03: Denial of Service in Apache HTTP Server 2.x

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 04.08.03: http://www.idefense.com/advisory/04.08.03.txt Denial of Service in Apache HTTP Server 2.x April 8, 2003 I. BACKGROUND The Apache Software Foundation's HTTP Server Project is an effort to develop and maintain an...

TOPO 1.41 - Full Path Disclosure

TOPO 1.41 - Full Path Disclosure source: https://www.securityfocus.com/bid/6768/info It has been reported that TOPo may return information to users that is sensitive in nature. Under some circumstances, it is possible to produce an error message that reveals information about web directory...

prodos.sh

Hello, proftpd is vulnerable to denial of service similar to the list /..//..//../. !/bin/sh proftpd do this some more to make sure the system eventually dies cnt=25 while $cnt -gt 0 ; do ftp -n EOF& o $1 quote user $2 quote pass $3 quote stat /////// quit EOF let cnt=cnt-1 done sleep 2 killall -...

Red Hat 6.2 inetd Internal Service Connections Remote DoS

The remote host has a bug in its 'inetd' server. 'inetd' is the 'internet super-server' and is in charge of managing multiple sub-servers like telnet, ftp, chargen, and more. There is a bug in the inetd server that comes with RedHat 6.2, which allows an attacker to prevent it from working...

DOS for Icq 2001&2002

Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...

Three Windows XP UPNP DOS attacks

Below you will find a quick recap of a few denial of service exploits I discovered against Windows XP and selected versions of WinME. Microsoft confirmed my findings: bulletin MS01-54. The paper is a narrative and the author hopes it will be useful for newbies and an enjoyable paper for the...