CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2004-2168

BaSoMail 1.24 is affected by CVE-2004-2168: remote attackers can cause a denial of service by opening multiple connections to TCP port 25 (SMTP) or 110 (POP3), leading to CPU consumption. The available sources confirm the vulnerability details and affected product/version, with no exploitation sp...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

[SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory 736-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[Full-disclosure] Prevx Pro 2005 - Multiple Vulnerabilities

Prevx Pro 2005 - Multiple Vulnerabilities ================================================= PROGRAM: PrevX Pro 2005 OMEPAGE: http://www.prevx.com DESCRIPTION ================================================= " Prevx Pro 2005 is the new ‘must have' security solution. Prevx Pro utilises the latest...

DSA-736-2 spamassassin - mail header parsing error

Bulletin has no description...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1923

CVE-2005-1923 affects ClamAV up to 0.85/0.83 (affected: ClamAV 0.83 and other versions before 0.86). The vulnerability is in the ENSURE_BITS macro used in mszipd.c, where a CAB file with cffile_FolderOffset = 0xff can cause a zero-length read, leading to an infinite loop and high CPU usage (remot...

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1908

CVE-2002-1908 affects Microsoft IIS 5.0 and 5.1. The vulnerability allows remote attackers to trigger high CPU usage leading to a denial of service by sending an HTTP request whose Host header contains a large number of forward-slash characters. The Red Hat and CVE records corroborate the same im...

CVE-2002-1906

The CVE-2002-1906 issue affects Polycom ViaVideo web server versions 2.2 and 3.0. The vulnerability is a denial-of-service caused by remote attackers sending incomplete HTTP requests and keeping connections open, which leads to CPU consumption/lockups. The available connected sources (OpenVAS NAS...

spamassassin security update

CentOS Errata and Security Advisory CESA-2005:498 An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way t...

CVE-2005-1266

CVE-2005-1266 affects Apache SpamAssassin 3.0.1–3.0.3, where a remote attacker can trigger a denial of service by sending a message with a long Content-Type header and no boundaries, causing CPU consumption. The issue is documented across multiple advisories and vendors, with Debian Red Hat CentO...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

CVE-2001-1490

CVE-2001-1490 affects Mozilla 0.9.6 and enables a remote denial-of-service through a web page containing a large number of images, causing CPU consumption and memory leaks. The connected documents confirm the vulnerable product and the impact but do not provide concrete remediation steps or patch...

CVE-2001-1489

The provided records identify CVE-2001-1489 as an issue in Microsoft Internet Explorer 6 where processing a web page containing a large number of images can lead to a denial of service through CPU consumption and memory leaks. The vulnerability is described consistently across sources (NVD/CVE en...

CVE-2001-1490

Mozilla 0.9.6 allows remote attackers to cause a denial of service CPU consumption and memory leak via a web page with a large number of images...

CVE-2001-1489

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service CPU consumption and memory leak via a web page with a large number of images...