3520 matches found
Squid < 2.4.STABLE2 mkdir-only PUT Request DoS
Binary data 1524.prm...
SquirrelMail < 1.2.11 Multiple Script XSS
The target is running at least one instance of SquirrelMail whose version number is between 1.2.0 and 1.2.10 inclusive. Such versions do not properly sanitize From headers, leaving users vulnerable to XSS attacks. Further, since SquirrelMail displays From headers when listing a folder, attacks do...
Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:069)
A vulnerability in racoon prior to version 20040408a would allow a remote attacker to cause a DoS memory consumption via an ISAKMP packet with a large length field. Another vulnerability in racoon was discovered where, when using RSA signatures, racoon would validate the X.509 certificate but wou...
Mandrake Linux Security Advisory : htdig (MDKSA-2001:083)
A problem was discovered in the ht://Dig web indexing and searching program. Nergal reported a vulnerability in htsearch that allows a remote user to pass the -c parameter, to use a specific config file, to the htsearch program when running as a CGI. A malicious user could point to a file like...
Mandrake Linux Security Advisory : postfix (MDKSA-2003:081)
Two vulnerabilities were discovered in the postfix MTA by Michal Zalewski. Versions prior to 1.1.12 would allow an attacker to bounce- scan private networks or use the daemon as a DDoS Distributed Denial of Service tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP...
SuSE-SA:2004:010: Linux Kernel
The remote host is missing the patch for the advisory SuSE-SA:2004:010 Linux Kernel. Various vulnerabilities have been fixed in the newly available kernel updates. The updates consist of fixes for the following vulnerabilities: - The dofork memory leak, which could lead to a local DoS attack. All...
Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco CatOS Telnet, HTTP and SSH Vulnerability Revision 1.0 For Public Release 2004 June 9 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...
[NT] Agnitum Outpost Firewall Pro DoS
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
DoS против MDaemon (imap buffer overflow)
Переполнение буфера в команде Select пользователь должен быть авторизован...
DiGi WWW Server DoS
Oversized request with large number of '/' character causes CPU exhaustion...
OpenSSL DoS
NULL pointer and uninitialized memory reference during SSL/TLS handshake...
Possible DoS on Linux kernel 2.4 and 2.6 using sigqueue overflow.
Hello. We faced a bug ? in Linux kernel causing different misbehaviours on our server. After exploration, it seems that we found some security implications of this issue. When a process exits, it's parent is notified by SIGCHLD, and finished child is kept in process table in "zombie" state until...
rsniff DoS
socket is leaked on unsuccessful authentication attempt...
Cisco IPSec VPN module IKE DoS
Device crashes on malformed IKE packet...
Cisco CSS UDP DoS
DoS on malformed packets to UDP/5002...
SpeakFreely DoS
Program crashes on receiving large number of small packets...
tcpdump L2TP DoS
L2TP packet containing 0xff,0x02 bytes causes parser to enter an infinite loop...
AppleShare IP FTP DoS
RMD / causes service to hang...