387 matches found
CVE-2002-1568
OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service crash via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENTMASTERKEY messages,...
CVE-2003-0689
The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...
CVE-2003-0689
The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...
Exchange XEXCH50 Remote Buffer Overflow
The remote mail server appears to be running a version of the Microsoft Exchange SMTP service that is vulnerable to a flaw in the XEXCH50 extended verb. This flaw can be used to completely crash Exchange 5.5 or to execute arbitrary code on Exchange 2000. This script was written by H D Moore See t...
DSA-378 mah-jong - buffer overflows, denial of service
Bulletin has no description...
Essentia Web Server 2.1 - 'URL' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/4159/info Essentia Web Server is a multi-threaded HTTP server designed for Microsoft Windows and Linux environments. Essentia is maintained by Essen. Essentia is prone to a remote denial of service. This condition may be triggered by submitting an...
CVE-2003-0213
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...
Winamp < 3.0b Multiple File Handling DoS
The remote host is using Winamp3, a popular media player which handles many files format mp3, wavs and more... This version suffers from multiple buffer overflow and denial of service issues that can be triggered by specially crafted b4s files. To perform an attack, the attack would have to send ...
CVE-2003-0161
The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...
CVE-2003-0140
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...
Important: Red Hat Security Advisory: : Updated PostgreSQL packages fix security issues and bugs
Updated PostgreSQL packages are available for Red Hat Linux 7.3 and 8.0. These packages correct several security and other bugs. A separate advisory deals with updated PostgreSQL packages for Red Hat Linux 6.2, 7, 7.1, and 7.2. PostgreSQL is an advanced Object-Relational database management syste...
Important: Red Hat Security Advisory: apache security update
Updated apache and httpd packages are available which fix a number of security issues for Red Hat Linux Advanced Server 2.1. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Buffe...
[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 224-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 224-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2002 http://www.debian.org/security/faq -...
CVE-2002-0692
Buffer overflow in SmartHTML Interpreter shtml.dll in Microsoft FrontPage Server Extensions FPSE 2000 and 2002 allows remote attackers to cause a denial of service CPU consumption or run arbitrary code, respectively, via a certain type of web file request...
AnalogX Proxy 4.0 - Socks4A Buffer Overflow
AnalogX Proxy 4.0 - Socks4A Buffer Overflow source: https://www.securityfocus.com/bid/5138/info AnalogX Proxy is prone to a buffer overflow condition when attempting to handle malformed SOCKS4A requests via TCP port 1080. This may be exploited to create a denial of service condition or to...
AnalogX Proxy 4.0 - Socks4A Buffer Overflow
source: https://www.securityfocus.com/bid/5138/info AnalogX Proxy is prone to a buffer overflow condition when attempting to handle malformed SOCKS4A requests via TCP port 1080. This may be exploited to create a denial of service condition or to potentially execute arbitrary instructions with the...
CVE-2002-0313
Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL...
CVE-2002-0336
Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / slash, wildcard, and .. characters...
CUPS ippRead() attribute name buffer overflow
cups-ippread-bo 8192 High Risk CUPS ippRead attribute name buffer overflow Description: Common Unix Printing System CUPS versions 1.1.13 and earlier are vulnerable to a denial of service attack caused by a buffer overflow in the handling of attribute names in the ippRead function. By setting a ve...