JDK: XML parsing Denial-Of-Service (6845701)

Previously, a denial-of-service flaw was found in Java which allowed the creation of an inifinte loop in XML headers that would consume all CPU resources. This issue was patched and Java is no longer vulnerable to a denial-of-service flaw due to the initiation of an infinte loop by means of XML...

JDK: XML parsing Denial-Of-Service (6845701)

Previously, a denial-of-service flaw was found in Java which allowed the creation of an inifinte loop in XML headers that would consume all CPU resources. This issue was patched and Java is no longer vulnerable to a denial-of-service flaw due to the initiation of an infinte loop by means of XML...

DEBIAN-CVE-2009-1891

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

DoS vulnerabilities in Firefox, Internet Explorer and Opera

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Firefox, Internet Explorer и Opera. Некоторое время назад была опубликована DoS уязвимость в Mozilla Firefox http://websecurity.com.ua/3214/ найденная Wojciech Pawlikowski. После публикации эксплоита к...

MDKA-2007:088-1 : hal

HAL daemon could use 100% cpu when some non storage SCSI peripheral when connected to a system. Update packages fix this issue by upgrading to new version 0.5.9.1, as well as other stability fixes and improved suspend/hibernation for some laptops. Update: An error was introduced in the previous...

Mandriva Update for hal MDKA-2007:088-1 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088-1 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Mandriva Update for hal MDKA-2007:088 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for hal MDKA-2007:088-1 (hal)

Check for the Version of hal OpenVAS Vulnerability Test Mandriva Update for hal MDKA-2007:088-1 hal Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

MS Internet Explorer JavaScript screen[ ] Denial of Service Exploit

No description provided by source. svchost.exe CPU usage boils up to almost 100 percent when we open the malicious webpage and IE7 Version 7.0.5730.13 closes with all tabs. Tested On: MicrosoftR WindowsR Server 2003, Standard Edition with Service Pack 2 With: IE Version 7.0.5730.13 I didn't use...

Microsoft Internet Explorer Javascript Denial Of Service

svchost.exe CPU usage boils up to almost 100 percent when we open the malicious webpage and IE7 Version 7.0.5730.13 closes with all tabs. Tested On: MicrosoftR WindowsR Server 2003, Standard Edition with Service Pack 2 With: IE Version 7.0.5730.13 I didn't use Javascript anywhere in the HTML belo...

libxml2: billion laughs DoS attack

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka the "billion laughs...

DEBIAN-CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

openssl public key DoS

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA...

Ruby cgi.rb Denial of Service Vulnerability

Overview The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces. Impact An attacker could cause a Denial of Service DoS on the Web services using cgi.rb...

Sun Solaris TCP SYN Flood远程拒绝服务漏洞

BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...

PT-2008-3637 · Ibm · Ibm Rational Build Forge

Name of the Vulnerable Software and Affected Versions: IBM Rational Build Forge version 7.0.2 Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption. This is achieved via a port scan, which spawns multiple bfagent server processes that attempt to...

Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

HP OpenView网络节点管理器ovalarmsrv.exe服务多个远程漏洞

BUGTRAQ ID: 28668 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的ovalarmsrv服务中存在多个远程漏洞，允许远程攻击者执行任意代码或导致拒绝服务。 ------------------------------ A ovalarmsrv格式串漏洞 ------------------------------ ovalarmsrv.exe进程监听于2953端口。如果使用缺少了以下格式参数的消息调用了ov.fprintfnew（之后会调用vsprintf）的话，就会导致格式串攻击：...

Fedora 7 : deluge-0.5.8.3-1.fc7 (2008-1288)

Version 0.5.8.3 of the Deluge BitTorrent client contains a security fix for a remote exploit which could cause Deluge to crash. It also fixes some high CPU usage spikes, loading issues with the BlocklistImport plugin, and lock-ups when the tracker returns data that is not properly UTF8-encoded...

Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699

Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...