358 matches found
TCPDUMP ISAKMP Payload Handling DoS (CVE-2004-0183)
Tcpdump parses and displays, and optionally records packets received on a network interface matching a user provided filter. Two vulnerabilities exist in the Tcpdump ISAKMP payload handling module, which can be exploited to cause a DoS Denial of Service by sending packets with specially crafted...
DEBIAN-CVE-2008-1389
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...
Fetchmail Verbose模式超大日志消息远程拒绝服务漏洞
BUGTRAQ ID: 29705 CVECAN ID: CVE-2008-2711 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 Fetchmail在处理消息时存在内存访问错误，以-v -v verbose级别运行的fetchmail在试图打印超过2048字节的头时会重新调整缓冲区大小并填充消息的多出部分，但没有重新初始化其 valist类型的源指针，因此可能会在栈上的无效地址读取数据，导致出现分段错误而崩溃。 fetchmail 6.3.9 临时解决方法：...
Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service Vulnerabilities Advisory ID: cisco-sa-20080521-ssh http://www.cisco.com/warp/public/707/cisco-sa-20080521-ssh.shtml Revision 1.0 For Public Release 2008 May 21 1600 UTC GMT...
Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update
Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...
CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
PT-2004-2106 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.1 through 0.10.7 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending a certain packet that causes the HTTP dissector to access...
Debian DSA-498-1 : libpng - out of bound access
Steve Grubb discovered a problem in the Portable Network Graphics library libpng which is utilised in several applications. When processing a broken PNG image, the error handling routine will access memory that is out of bounds when creating an error message. Depending on machine architecture,...
DSA-498 libpng - out of bound access
Bulletin has no description...
FreeBSD Security Advisory FreeBSD-SA-04:06.ipv6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:06.ipv6 Security Advisory The FreeBSD Project Topic: setsockopt2 IPv6 sockets input validation error Category: core Module: kernel Announced: 2004-03-29 Credit...
setsockopt(2) IPv6 sockets input validation error
From the FreeBSD Security Advisory: A programming error in the handling of some IPv6 socket options within the setsockopt2 system call may result in memory locations being accessed without proper validation. It may be possible for a local attacker to read portions of kernel memory, resulting in...
Medieval Total War <= 1.1 broadcast crash
Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: Remote crash of server and attached clients caused by long nickname Risk: Low/Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction...
xfstt array out of boundary
Large req-numranges causes out of array boundary memory access...
CVE-2002-0918
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error...
CVE-2002-0576
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message...
Ошибка форматной строки в perdition (format string)
Ошибка форматной строки при обращении к syslog...
Microsoft Windows XP2000 - GDI Denial of Service
Microsoft Windows XP2000 - GDI Denial of Service source: https://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode...