828 matches found
CVE-2010-1919
Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service gsan service hang by sending a crafted message using TCP...
Microsoft Windows Media Player '.AVI' File DOS Vulnerability
Windows Media Player is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenLDAP BER Decoding Denial of Service (CVE-2008-2952)
OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. There exists a denial of service vulnerability in OpenLDAP slapd. The flaw is due to a design error when decoding ASN.1 BER network messages. A remote unauthenticated attacker can trigger this...
CVE-2010-0163
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted message,...
Code injection
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted message,...
CVE-2010-0163
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted message,...
Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)
There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...
CVE-2010-0163
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted message,...
Macromedia Flash Media Server Administration Service Denial of Service (CVE-2005-4216)
Macromedia Flash Media Server software provides streaming media capabilities and an environment for creating and delivering interactive media applications. The Flash Media Server can be administered through an administration server that listens on TCP port 1111 by default. There exists a denial o...
CA BrightStor ARCserve Backup Discovery Service Denial of Service (CVE-2008-1979)
Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...
CA License Software GETCONFIG Buffer Overflow (CVE-2005-0581)
Computer Associates implements a license server/client mechanism in most of its products to provide control over product licenses. Normally a license server stores licences in a central location for centralized license management. This server is queried by clients for a valid a license in order t...
Design/Logic Flaw
The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite section o...
fetchmail/mutt/evolution/...: APOP password disclosure vulnerability
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...
CVE-2009-1889
The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...
CVE-2009-1491
McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a...
CVE-2009-1491
McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a...
Fedora 9 : udev-124-4.fc9 (2009-3712)
udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...
CVE-2009-1119
Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...
Integer overflow
Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...
Ubuntu Update for gaim vulnerability USN-675-2
Ubuntu Update for Linux kernel vulnerabilities USN-675-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6752.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gaim vulnerability USN-675-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...