3557 matches found
Medium: krb5
Issue Overview: It was found that kadmind's kpasswd service did not perform any validation on incoming network packets, causing it to reply to all requests. A remote attacker could use this flaw to send spoofed packets to a kpasswd service that appear to come from kadmind on a different server,...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2026)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2026 advisory. - epoll: clear the tfilechecklist on -ELOOP Joe Jin CVE-2012-3375 - epoll: kabi fixups for epoll limit wakeup paths Joe Jin CVE-2011-1083 - epoll:...
CVE-2013-2173
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...
Design/Logic Flaw
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...
CVE-2013-2173
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...
CVE-2013-2173
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...
krb5 security update
CentOS Errata and Security Advisory CESA-2013:0942 Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
Moderate: Red Hat Security Advisory: krb5 security update
Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2013-3381
Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756...
Design/Logic Flaw
Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756...
CVE-2013-3381
Cisco Hosted Collaboration Mediation is affected by CVE-2013-3381. The vulnerability allows an unauthenticated, remote attacker to cause excessive CPU utilization by sending malformed UDP packets to UDP port 162. The underlying issue is insufficient optimization of resources when flooded with mal...
CVE-2013-3381
Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756...
CVE-2002-2443
CVE-2002-2443 affects MIT Kerberos 5 (krb5) kadmind, specifically the kpasswd service, where schpw.c does not validate incoming UDP packets. This can allow a remote attacker to cause a denial of service via a forged UDP packet that triggers a packet/communication loop, consuming CPU and bandwidth...
CVE-2013-1236
Cisco TelePresence Supervisor MSE 8050 before 2.31.31 allows remote attackers to cause a denial of service CPU consumption or device reload by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763...
PT-2013-3541 · Python +1 · Python-Backports-Ssl Match Hostname +2
Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.4 python-backports-ssl match hostname affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by exploiting the ssl.match hostname...
CVE-2011-4609
The svcrun function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service CPU consumption via a large number of RPC connections...
Design/Logic Flaw
The svcrun function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service CPU consumption via a large number of RPC connections...
CVE-2011-4609
CVE-2011-4609 affects the GNU C Library (glibc) prior to 2.15. The vulnerability is in the svc_run function used by the RPC implementation, allowing remote attackers to cause a denial of service via a large number of RPC connections. The issue is documented with a CVSS v2 base score of 5.0 (Mediu...