Sendmail DNS DoS

Uninitialized pointer causes DoS conditions on bogus DNS reply...

CVE-2003-1201

ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service segmentation fault...

Повреждение кучив wu-ftpd (heap corruption)

Не проверяется результат функции glob, в результате free применяется к неинициализированному указателю. Потенциально это может быть исопльзовано для выполнения кода...

[SECURITY] New version of Debian bind packages released

Package: bind Vulnerability: remote Denial of Service Debian-specific: no Vulnerable: yes The version of BIND shipped with Debian GNU/Linux 2.2 is vulnerable to a remote denial of service attack, which can cause the nameserver to crash after accessing an uninitialized pointer. This problem is fix...