CVE-2008-6996

CVE-2008-6996 affects Google Chrome BETA 0.2.149.27. The vulnerability is that Chrome does not prompt the user before saving an executable file, potentially enabling a remote attacker or malware to cause disk-based DoS or exploit other vulnerabilities via a URL referencing an executable (possibly...

CVE-2008-6996

Removed by vendor...

OpenJDK: DoS (disk consumption) via handling of temporary font files

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...

CVE-2008-5618

imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service disk consumption via a large number of spurious messages...

Code injection

Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...

CVE-2008-2552

Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...

CVE-2008-2552

CVE-2008-2552 affects Sun Solaris 10 and Sun Service Tag prior to 1.1.3. The issue arises in the Service Tag Registry and allows a local attacker to cause a denial of service (disk consumption) via unspecified vectors. Nessus plugins list patches 136839-01 for SPARC and 136840-01 for x86 as the r...

CVE-2003-1462

CVE-2003-1462 affects mod_survey 3.0.0 through 3.0.15-pre6. The issue arises because it does not validate whether a survey exists before creating a subdirectory, which can be exploited remotely to cause disk consumption and potentially crash the service (DoS). Exploitation details are not provide...

CVE-2007-4618

CVE-2007-4618 affects BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7. The issue is an unspecified vulnerability that allows remote attackers to cause a denial of service via certain malformed HTTP headers, leading to disk consumption. The provided documents do not include expli...

CVE-2007-3971

CVE-2007-3971 affects ESET NOD32 Antivirus before 2.2289. The vulnerability is an integer overflow in the ASPACK packed file parser that can trigger an infinite loop, enabling remote attackers to cause CPU and disk consumption (DoS). The provided documents do not specify a remediation or patch ve...

Code injection

The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service disk consumption by uploading multiple bar codes, as demonstrated by a WSF package...

CVE-2007-2566

The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service disk consumption by uploading multiple bar codes, as demonstrated by a WSF package...

CVE-2007-2566

CVE-2007-2566 affects the Taltech Tal Bar Code ActiveX control. The SaveBarCode function allows remote attackers to cause a denial of service by uploading multiple bar codes, resulting in disk consumption. This is documented in the NVD entry and corroborated by multiple external references; explo...

CVE-2007-0672

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service disk consumption and daemon hang via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in...

CVE-2007-0672

CVE-2007-0672 affects BrightStor Mobile Backup 4.0 (LGSERVER.EXE). A remote attacker can cause a denial of service by sending a crafted authentication packet (value 0xFFFFFF7F), causing excessive writes to a .USX file under CA_BABLDdata\Server\data\transfer\ that leads to disk consumption and dae...

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service disk consumption, or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332...

CVE-2007-0421

BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service disk consumption via requests containing malformed headers, which cause a large amount of data to be written to the server log...

Code injection

BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service disk consumption via requests containing malformed headers, which cause a large amount of data to be written to the server log...

CVE-2007-0421

BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service disk consumption via requests containing malformed headers, which cause a large amount of data to be written to the server log...

CVE-2006-5833

gbcmsphpfiles/uploader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote attackers to cause a denial of service disk consumption and execute arbitrary code by uploading arbitrary files, such as executing PHP code via an uploaded PHP file...