CVE-2007-4570: Improper Input Validation

Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service temporary daemon outage via a large range of compartments in sensitivity labels...

CVE-2007-4570

CVE-2007-4570 concerns an algorithmic complexity vulnerability in the MCS translation daemon (mcstrans) version 0.2.3 that allows a local attacker to cause a denial of service by targeting a large range of compartments in sensitivity labels. Public documents from various advisories (ELSA-2007-054...

Low: Red Hat Security Advisory: mcstrans security and bug fix update

An updated mcstrans package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. mcstrans is the translation daemon used on SELinux machines to translate program context into human readable form. An...

mctransd DoS

Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service temporary daemon outage via a large range of compartments in sensitivity labels...

CVE-2006-6931

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service CPU consumption and detection outage via crafted network traffic, aka a "backtracking attack."...

CVE-2006-6931

Removed by vendor...

CVE-2006-6931: Undefined Security Weakness

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service CPU consumption and detection outage via crafted network traffic, aka a "backtracking attack."...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

CVE-2006-3380 affects FreeStyle Wiki before 3.6.2, where an algorithmic complexity vulnerability allows a remote attacker to cause a denial of service by diffing large, crafted pages to trigger worst-case behavior. The connected JVN entry and NVD record corroborate a DoS via CPU consumption, trig...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379

The CVE-2006-3379 entry concerns Hiki Wiki: versions 0.6.0–0.6.5 and 0.8.0–0.8.5 are vulnerable to an algorithmic complexity DoS when a remote attacker triggers largest-case CPU usage by diffing large, crafted pages. The underlying issue is a denial of service caused by CPU consumption, with no o...

CVE-2006-3380: Undefined Security Weakness

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379: Undefined Security Weakness

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3252

CVE-2006-3252 describes a buffer overflow in the PrivateWire Online Registration Facility (ADMCREG.EXE) used by PrivateWire VPN software up to version 3.7. The vulnerability allows remote attackers to execute arbitrary code via a long GET request. Public references show exploitation tooling in Me...

CVE-2006-3252

Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2006-3252: Undefined Security Weakness

Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...

nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 12 Insecure Generation of Diffie-Hellman keys ------------------------------------------ Note ==== nCipher is publishing three advisories numbered 12, 13, and 14 simultaneously. You are advised to review all three before...

CVE-2005-2506

CVE-2005-2506 describes an algorithmic complexity vulnerability in CoreFoundation on Mac OS X 10.3.9 and 10.4.2. The issue arises in the handling of crafted Gregorian dates, allowing an attacker to trigger excessive CPU usage and cause a denial of service. The affected component is CoreFoundation...