CVE-2002-0438

CVE-2002-0438 affects ZyXEL ZyWALL 10; firmware versions before 3.50 are vulnerable to a crafted ARP packet using the firewall’s IP and a malformed MAC, causing the firewall to disable its LAN interface (DoS). The referenced fix is a ZyWALL 10 firmware update to 3.50 (or newer). If exploitation d...

PHP classical bugs in phpBB allows remote code execution

Uninitialized PHP variables and ability to modify SQL query allow to execute code on server. Crossite scripting. Invalid NULL-byte handling leads to DoS...

servletexec-4.1.txt

Westpoint Security Advisory Title: Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 Risk Rating: High Software: ServletExec 4.1 ISAPI / IIS 4 & 5 Platforms: Win2k / WinNT 4 Vendor URL: www.newatlanta.com Author: Matt Moore Date: 22 May 2002 Advisory ID: wp-02-0006.txt Overview:...

CVE-2002-0200

The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...

CVE-2002-0353

Concrete details found: CVE-2002-0353 affects Ethereal 0.9.2 and earlier, stemming from the ASN.1 parser, enabling remote denial of service via a malformed packet that triggers improper memory allocation (possibly due to zero-length fields). Public advisories reference multiple vendors (Debian, R...

CVE-2002-0321

Yahoo! Messenger 5.0 is affected by a vulnerability that lets a remote attacker spoof another user’s name in messages, enabling social engineering or a denial-of-service via flooding. The issue arises from the ability to modify the source username used in messages. Impact is described as potentia...

CVE-2001-1315

The CVE-2001-1315 issue affects Critical Path’s InJoin Directory Server and LiveContent Directory. The vulnerability arises in the LDAP handling code, specifically through malformed BER encodings used in the PROTOS LDAPv3 test suite, which can be exploited remotely to trigger a crash (DoS) and ma...

CVE-2002-0342

Kmail 1.2 on KDE 2.1.1 is affected by a vulnerability that allows remote attackers to cause a denial-of-service (crash) by sending an email with a body of about 55 KB. The available sources confirm the affected product and the nature of the impact (availability impact: crash) but do not provide a...

Logitech Keyboard Insecurity

Risk: Rather Low Logitech has a piece of software available with their iTouch line of keyboards cordless ones included that allows you to press one button and run a program, control volume, jump to a URL, or shut down the PC. When you lock a computer, with NT/2000/XP/etc. however, these buttons...

Buffer overflow in Ethereal

Buffer overflow on SNMP and LADP packets parsing. DoS possibility in multiple protocols parsing...

Multiple bugs in Microsoft Internet Information Server

Multiple buffer overflows, crossite scripting, DoS...

Oracle9i TSN DoS Attack

name : Oracle date : 28/3/2002 description : Oracle9i TSN DoS Attack severity : High risk homepage : www.oracle.com versions : 9.0.1.1 another version may be too Bug description : For crash Oracle9i you need sent ONE TCP packet $00 = 1 byte to 1521 port and you can fogot about Oracle CPU - 100.Yo...

CVE-1999-1205

CVE-1999-1205 affects nettune on HP-UX 10.01 and 10.00 where nettune is installed with setuid root, enabling a local attacker to modify critical networking configuration and cause a denial of service. The underlying cause is the risky setuid configuration of nettune, leading to elevated privilege...

CVE-2000-0593

WinProxy 2.0 and 2.0.1 are affected. A remote attacker can cause a denial of service by sending an HTTP GET request without specifying an HTTP version. This vulnerability is cataloged as CVE-2000-0593 with a NVD base score of 5.0 (Medium) and an availability impact of Partial. The available recor...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2000-0290

The CVE-2000-0290 entry concerns the Webstar HTTP server. Vulnerability: a buffer overflow in the HTTP server that is triggered by a long GET request, enabling remote attackers to cause a denial of service. Affected component: Webstar HTTP server (specific versions not provided in the documents)....

CVE-2001-0706

CVE-2001-0706 affects Maximum Rumpus FTP Server (2.0.3 and earlier). The issue is a denial-of-service (crash) trigger when an FTP mkdir command specifies a large number of sub-folders. The provided sources identify the vulnerable component and the impact but do not include a documented fix or pat...

CVE-1999-1336

The CVE-1999-1336 entry concerns a vulnerability in 3Com HiPer Access Router Card (HiperARC) versions 4.0–4.2.29 that allows a remote attacker to cause a denial of service (reboot) by flooding the telnet port with IAC packets. The cited sources confirm the affected device family and the attack ve...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier is affected. A remote attacker can trigger a denial of service by sending a sequence of large ICMP ECHO REPLY (ping) packets that causes the device to enter ROMMON mode and stop forwarding packets. Affected component is the CBOS software on Cisco devices; the root cau...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...