CVE-2011-1471

CVE-2011-1471 : Integer signedness error in zip_stream.c of PHP’s Zip extension (pre-5.3.6) allows context-dependent attackers to cause a denial of service via malformed ZIP archives that trigger errors in zip_fread. Affected product/version: PHP before 5.3.6 (Zip extension). Impact: CPU consumpt...

CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

CVE-2011-0762

The vsffilenamepassesfilter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service CPU consumption and process slot exhaustion via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632...

CVE-2010-4754

The CVE-2010-4754 entry covers a DoS in the glob() implementation of libc (and related glob in libsystem on macOS) caused by crafted glob expressions that do not match any pathnames. The message notes remote authenticated users can trigger CPU/memory consumption via such expressions, demonstrated...

CVE-2010-4756

Technical details about CVE-2010-4756 are not provided in the connected documents. The Initial Description notes a glibc glob DoS via crafted expressions but lacks product/version/impact/fix specifics. Monitor for updates.

CVE-2011-0762

The vsffilenamepassesfilter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service CPU consumption and process slot exhaustion via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632...

CVE-2011-0762

The vsffilenamepassesfilter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service CPU consumption and process slot exhaustion via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632...

Mandriva Linux Security Advisory : MHonArc (MDVSA-2011:003)

Multiple vulnerabilities has been found and corrected in MHonArc : MHonArc 2.6.16 allows remote attackers to cause a denial of service CPU consumption via start tags that are placed within other start tags, as demonstrated by a dydydydy sequence, a different vulnerability than CVE-2010-4524...

Code injection

Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the...

Mandriva Update for MHonArc MDVSA-2011:003 (MHonArc)

Check for the Version of MHonArc OpenVAS Vulnerability Test Mandriva Update for MHonArc MDVSA-2011:003 MHonArc Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for MHonArc MDVSA-2011:003 (MHonArc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4247

CVE-2010-4247 is a Xen/blkback-blktap DoS vulnerability affecting Xen on Linux kernel 2.6.18 and similar versions, where do_block_io_op can loop indefinitely due to a large production request index in the blkback or blktap back-end drivers, causing CPU exhaustion. Public documents in the Oracle L...

[ MDVSA-2011:003 ] MHonArc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:003 http://www.mandriva.com/security/ Package : MHonArc Date : January 10, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been...

CVE-2010-4247

The doblockioop function in 1 drivers/xen/blkback/blkback.c and 2 drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service infinite loop and CPU consumption via a large production request index to...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

CVE-2010-4671

The CVE-2010-4671 entry concerns Cisco IOS IPv6 Neighbor Discovery, where the ND implementation can be overwhelmed by a flood of Router Advertisements with spoofed sources, causing CPU exhaustion and device hang. Affected product: Cisco IOS pre-15.0(1)XA5. Trigger: RA flood using tools like flood...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

CVE-2010-4669

The CVE-2010-4669 entry concerns the IPv6 Neighbor Discovery (ND) router advertisement flood vulnerability. Affected products include the IPv6 stack in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7. The issue arises when an attacker sends many Router Advertise...

CVE-2010-4670

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...