CVE-2008-2090

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

novelledir-dos.txt

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0927 =...

CVE-2008-2090: Undefined Security Weakness

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

Novell eDirectory 8.7.3 SP 10 8.8.2 - HTTP headers Denial of Service

Novell eDirectory 8.7.3 SP 10 8.8.2 - HTTP headers Denial of Service = Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=...

Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers Denial of Service

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0927 =...

CVE-2008-1387

ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1387

CVE-2008-1387 affects ClamAV up to version 0.93, where a crafted ARJ archive can cause CPU-based denial of service. Public sources in the connected data corroborate that ClamAV prior to 0.93 was susceptible, and advisories (e.g., Mandriva MDVSA-2008:088) describe the vulnerability as fixed in the...

CVE-2008-1387: Undefined Security Weakness

ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Code injection

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with 1 multiple Connection headers or 2 a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777...

Design/Logic Flaw

The eDirectory Host Environment service dhost.exe in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service CPU consumption via a long HTTP HEAD request to TCP port 8028...

CVE-2008-1777

The eDirectory Host Environment service dhost.exe in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service CPU consumption via a long HTTP HEAD request to TCP port 8028...

CVE-2008-0927

The CVE-2008-0927 issue is in dhost.exe of Novell eDirectory. Affected products are eDirectory versions before SP10 of 8.7.3 and before 8.8.2, where the dhost.exe process can be forced to consume 100% CPU (DoS) by certain HTTP requests that abuse Connection headers (either multiple Connection hea...

CVE-2007-5406

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

CVE-2008-1367

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

CVE-2008-1353

zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...

CVE-2008-1353

zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...

CVE-2008-1353

zabbixagentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service CPU and connection consumption via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero...

Code injection

The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause 1 a denial of service daemon crash via an invalid Version field or 2 a denial of service CPU consumption and daemon termination via an invalid or partial message...

Design/Logic Flaw

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...