Fedora 15 : kernel-2.6.42.3-2.fc15 (2012-1503)

CVE-2011-4086: jbd2: unmapped buffer with Unwritten or Delay flags set can lead to DoS rhbz 788260 This update rebases the kernel to the newest upstream stable release 3.2.3. As with previous updates, it presents itself as 2.6.xx still, for compatibility reasons. Note that Tenable Network Securit...

Fedora 16 : openssl-1.0.0g-1.fc16 (2012-0708)

A new upstream package fixing a security vulnerability DoS regression in DTLS introduced by the previous update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...

Fedora 16 : pdns-3.0.1-1.fc16 (2012-0263)

This update fixes : - Bug 772581 - PowerDNS DoS Vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

isc-dhcp-server -- DoS in DHCPv6

ISC reports: Due to improper handling of a DHCPv6 lease structure, ISC DHCP servers that are serving IPv6 address pools AND using Dynamic DNS can encounter a segmentation fault error while updating lease status under certain conditions. The potential exists for this condition to be intentionally...

PowerDNS Authoritative Server Remote DoS Vulnerability (Jan 2012)

PowerDNS Authoritative Server is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-3414

The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, whic...

CVE-2011-3414

CVE-2011-3414 concerns a denial-of-service in the Microsoft .NET Framework ASP.NET HashTable mapping. The vulnerability arises from the CaseInsensitiveHashProvider.getHashCode function used by the HashTable implementation across .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, which can ...

SuSE 11.1 Security Update : cyrus-imapd (SAT Patch Number 5233)

An authentication bypass CVE-2011-3372 and a DoS vulnerability CVE-2011-3481 have been fixed in the Cyrus IMAPd nntpd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Microsoft Windows DoS

Crash on TTF fonts parsing...

[security bulletin] HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01915145 Version: 1 HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be act...

SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7786)

An authentication bypass CVE-2011-3372 and a DoS vulnerability CVE-2011-3481 have been fixed in the Cyrus IMAPd nntpd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2011-2008

CVE-2011-2008 affects Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010. The vulnerability allows remote, unauthenticated attackers to cause a denial of service (SNA Server service outage) by sending crafted TCP/UDP traffic, described as an Access of Unallocated Memory Do...

CVE-2011-2008

Microsoft Host Integration Server HIS 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service SNA Server service outage via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."...

Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-xcpcupsxml Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...

Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Jabber Extensible Communications Platform Jabber XCP and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could...

Fedora 14 : quassel-0.7.3-1.fc14 (2011-12580)

Fixes CVE-2011-3354, invalid CTCP handling causes DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Mini FTP Server 1.1 - Buffer Corruption Remote Denial of Service

!/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed code. Works with Total commander. Desc: MiniFTPServ...

Microsoft Host Integration Server snabase.exe Denial of Service (CVE-2011-2007)

A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...

Simple HTTPd 1.42 - Denial of Servive

Simple HTTPd 1.42 - Denial of Servive !/usr/bin/python Exploit Title: Simple HTTPd 1.42 PoC DoS Date: 8/10/2011 Author: G13 Software Link: http://sourceforge.net/projects/shttpd/files/shttpd/1.42/shttpd-1.42.tar.gz/download Version: 1.42 Tested on: WinXP SP1 CVE : 2011-2900 Since Mongoose HTTPd a...

Juniper Networks Junos OS DoS Vulnerability (CVE-2004-0468)

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service DoS via certain IPv6 packets. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...