3520 matches found
Tiny Personal Firewall DoS
DoS against audit subsystem on large amount of audit info, problem hadling spoofed packets with IP's from FW itself...
[SECURITY] [DSA-136-1] Multiple OpenSSL problems
Package : openssl Problem type : multiple remote exploits Debian-specific: no CVE : CAN-2002-0655 CAN-2002-0656 CAN-2002-0657 CAN-2002-0659 The OpenSSL development team has announced that a security audit by A.L. Digital Ltd and The Bunker, under the DARPA CHATS program, has revealed remotely...
DSA-136 openssl - multiple remote exploits
Bulletin has no description...
Watchguard Firebox DoS
Specially crafted data sent to TCP/4110 causes Dynamic VPN Configuration Protocol service to crash...
CVE-2001-0888
The CVE-2001-0888 entry concerns Atmel Firmware 1.3 Wireless Access Point (WAP). The vulnerability arises in SNMP handling: sending a request with a non-"public" community string or an unknown OID can cause the WAP to deny subsequent SNMP requests, resulting in a denial of service. The provided s...
CVE-2001-1083
Icecast versions 1.3.7 and earlier (including 1.3.7 and other
CVE-2001-1071
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) is affected. A remote attacker can cause memory exhaustion and a denial of service by flooding CDP neighbor announcements. Impact is memory consumption on affected devices; no public exploit details are provided in the sources. Rem...
IGMP DoS
By sending unicast membership report to attacked host it's possible to prevent one from registering in group...
CVE-2002-0534
CVE-2002-0534 affects PostBoard 2.0.1 and earlier, where BBCode handling in [code] tags allows remote attackers to trigger a denial of service (CPU consumption) and corrupt the database. The underlying cause is improper processing of null characters (�) in code blocks. Impact is limited to DoS an...
CVE-2002-0509
CVE-2002-0509 affects Oracle 9i’s Transparent Network Substrate (TNS) Listener (version 9.0.1.1). A remote attacker can cause a denial of service (CPU consumption) by sending a single malformed TCP packet to port 1521. Root cause and exact vulnerable component are stated only as the TNS Listener ...
CVE-2002-0438
CVE-2002-0438 affects ZyXEL ZyWALL 10; firmware versions before 3.50 are vulnerable to a crafted ARP packet using the firewall’s IP and a malformed MAC, causing the firewall to disable its LAN interface (DoS). The referenced fix is a ZyWALL 10 firmware update to 3.50 (or newer). If exploitation d...
PHP classical bugs in phpBB allows remote code execution
Uninitialized PHP variables and ability to modify SQL query allow to execute code on server. Crossite scripting. Invalid NULL-byte handling leads to DoS...
servletexec-4.1.txt
Westpoint Security Advisory Title: Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 Risk Rating: High Software: ServletExec 4.1 ISAPI / IIS 4 & 5 Platforms: Win2k / WinNT 4 Vendor URL: www.newatlanta.com Author: Matt Moore Date: 22 May 2002 Advisory ID: wp-02-0006.txt Overview:...
CVE-2001-1315
The CVE-2001-1315 issue affects Critical Path’s InJoin Directory Server and LiveContent Directory. The vulnerability arises in the LDAP handling code, specifically through malformed BER encodings used in the PROTOS LDAPv3 test suite, which can be exploited remotely to trigger a crash (DoS) and ma...
CVE-2002-0200
The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...
CVE-2002-0321
Yahoo! Messenger 5.0 is affected by a vulnerability that lets a remote attacker spoof another user’s name in messages, enabling social engineering or a denial-of-service via flooding. The issue arises from the ability to modify the source username used in messages. Impact is described as potentia...
CVE-2002-0353
Concrete details found: CVE-2002-0353 affects Ethereal 0.9.2 and earlier, stemming from the ASN.1 parser, enabling remote denial of service via a malformed packet that triggers improper memory allocation (possibly due to zero-length fields). Public advisories reference multiple vendors (Debian, R...
CVE-2002-0342
Kmail 1.2 on KDE 2.1.1 is affected by a vulnerability that allows remote attackers to cause a denial-of-service (crash) by sending an email with a body of about 55 KB. The available sources confirm the affected product and the nature of the impact (availability impact: crash) but do not provide a...
Logitech Keyboard Insecurity
Risk: Rather Low Logitech has a piece of software available with their iTouch line of keyboards cordless ones included that allows you to press one button and run a program, control volume, jump to a URL, or shut down the PC. When you lock a computer, with NT/2000/XP/etc. however, these buttons...