598 matches found
CVE-2011-0163
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service resource unavailability via a crafted web site that conducts a cache-poisoning attack...
Nokia MultiMedia Player 1.1 - Remote Denial of Service
Nokia MultiMedia Player 1.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to...
KLA10064 DoS vulnerability in SlySoft
An improper buffer validation vulnerability was found in SlySoft products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally at a point related to ElbyCDIO.sys via a specially designed IOCTL call. Original advisories CloneC...
Thunderbird DoS attacks via malformed MIME emails (Linux)
The host is running Mozilla Thunderbird which is prone to denial of service vulnerability. Vulnerability: Flaw is due to improper handling of multipart/mixed e-mail messages with many MIME parts and e-mail messages with many Content-type: message/rfc822 headers. OpenVAS Vulnerability Test $Id:...
Design/Logic Flaw
XRunSabre in sabre aka xsabre 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service application unavailability by creating a /tmp/sabre.log file that cannot be overwritten...
Pragma TelnetServer空指针引用拒绝服务漏洞
BUGTRAQ ID: 27143 Pragma TelnetServer是一款远程访问和控制Telnet服务器。 Pragma TelnetServer处理协议数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 TelnetServer服务器对每个入站连接启动一个telnetd.exe进程，该进程在处理TELOPT PRAGMA LOGON telnet选项（138号）期间存在空指针引用，导致进程终止。尽管终止单个进程不会影响其他进程，但终止某些进程会导致拒绝访问服务器。 Pragma Systems TelnetServer = 7.0 Build 4 Revision 58...
VMware Workstation 6.0多个安全漏洞
BUGTRAQ ID: 25728,25729,25731,25732 CVECAN ID: CVE-2007-0061,CVE-2007-0062,CVE-2007-0063,CVE-2007-4059,CVE-2007-4155,CVE-2007-4496,CVE-2007-4497 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的实现上存在多个安全漏洞，可导致多种威胁。 具体如下： 1 VMWare的DHCP服务器可被恶意网页用来获取系统权限。 2...
Design/Logic Flaw
BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service SSL port unavailability by accessing a half-closed SSL socket...
CVE-2007-2704
BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service SSL port unavailability by accessing a half-closed SSL socket...
Design/Logic Flaw
TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service filesystem unavailability or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using 1 /usr/bin or 2 another user's home directory, a different issue than CVE-2007-1589...
Code injection
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...
CVE-2007-1589
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...
Multiple vulnerabilities in TK8 Safe v.3.0.5
Multiple vulnerabilities in TK8 Safe v.3.0.5 July 3, 2006 ---- Summary: TK8 Safe www.tk8.com is a password management application, which stores authentication details and other sensitive data in encrypted local folders. A number of issues have been discovered in version 3.0.5 of the application...
AWF CMS 1.11 - 'spaw_root' Remote File Inclusion
----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable ----------------------------------------------------- 1...
CVE-2006-1297
Affected products/versions: Veritas Backup Exec Remote Agent for Windows Servers (9.1–10.1), NetWare Servers (9.1, 9.2), and Linux Servers (10.0–10.1). Vulnerability type/impact: an unspecified vulnerability leading to a Denial of Service (application crash or unavailability) due to memory errors...
Business Objects WebIntelligence 6.5x Account Lockout and System DoS
Computer Sciences Corporation Security Advisory December 14, 2005 Summary: CSC have discovered an issue that could impact upon the availability and security of servers operating Business Objects WebIntelligence software. If a remote malicious attacker is able to access authentication mechanisms...