CVE-2005-2309: Uncontrolled Resource Consumption

Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...

CVE-2004-2244

The CVE-2004-2244 entry affects Oracle XML parsing in Oracle Application Server Release 2 (9i) and Database Server Release 2, across multiple versions (9.0.3.0/9.0.3.1, 9.0.2.3 and earlier, Release 1 1.0.2.x, and 9.2.0.1 and later). It describes a denial-of-service condition triggered by processi...

CVE-2002-2053: Undefined Security Weakness

The design of the Hot Standby Routing Protocol HSRP, as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service CPU consumption via a router with the same IP address as the interface on which HSRP is running, which causes a loop...

CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2004-2168

BaSoMail 1.24 is affected by CVE-2004-2168: remote attackers can cause a denial of service by opening multiple connections to TCP port 25 (SMTP) or 110 (POP3), leading to CPU consumption. The available sources confirm the vulnerability details and affected product/version, with no exploitation sp...

CVE-2004-2168: Undefined Security Weakness

BaSoMail 1.24 allows remote attackers to cause a denial of service CPU consumption via multiple connections to TCP port 1 25 SMTP or 2 110 POP3...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

[SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory 736-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[Full-disclosure] Prevx Pro 2005 - Multiple Vulnerabilities

Prevx Pro 2005 - Multiple Vulnerabilities ================================================= PROGRAM: PrevX Pro 2005 OMEPAGE: http://www.prevx.com DESCRIPTION ================================================= " Prevx Pro 2005 is the new ‘must have' security solution. Prevx Pro utilises the latest...

DSA-736-2 spamassassin - mail header parsing error

Bulletin has no description...

CVE-2005-1923

CVE-2005-1923 affects ClamAV up to 0.85/0.83 (affected: ClamAV 0.83 and other versions before 0.86). The vulnerability is in the ENSURE_BITS macro used in mszipd.c, where a CAB file with cffile_FolderOffset = 0xff can cause a zero-length read, leading to an infinite loop and high CPU usage (remot...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2002-1906

The CVE-2002-1906 issue affects Polycom ViaVideo web server versions 2.2 and 3.0. The vulnerability is a denial-of-service caused by remote attackers sending incomplete HTTP requests and keeping connections open, which leads to CPU consumption/lockups. The available connected sources (OpenVAS NAS...

CVE-2002-1908

CVE-2002-1908 affects Microsoft IIS 5.0 and 5.1. The vulnerability allows remote attackers to trigger high CPU usage leading to a denial of service by sending an HTTP request whose Host header contains a large number of forward-slash characters. The Red Hat and CVE records corroborate the same im...

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1908: Undefined Security Weakness

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1911: Undefined Security Weakness

ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service CPU and memory consumption via a large number of SYN packets SYN flood. NOTE: the vendor was not able to reproduce the issue...

spamassassin security update

CentOS Errata and Security Advisory CESA-2005:498 An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way t...