MDKSA-2004:093 - Updated squid packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: squid Advisory ID: MDKSA-2004:093 Date: September 15th, 2004 Affected versions: 10.0, 9.2 Problem Description: A vulnerability in the NTLM helpers in squid 2.5 could allow for malformed NTLMSSP...

Inkra 1504GX DoS vulnerability in conducting IP protocol

Inkra 1504GX DoS vulnerability in conducting IP protocol Author: Felix [email protected] Song Liu [email protected] Release date: 2004-08-25 Affected system: Inkra 1504GX with router VSM release 2.1.4.b003 didn't test other products of Inkra. Detail: Inkra 1504GX's router VSMrelease...

MailEnable SMTP Connector Service DNS MX Response DoS

According to its banner, the remote host is running at least one instance of MailEnable's SMTP Connector service. A flaw exists in both the Standard Edition 1.7x and Professional Edition 1.2x/1.5a-e that results in this service crashing if it receives a DNS response with over 100 MX records. A...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2239.prm...

MailEnable HTTPMail Service Authorization Header Handling Remote DoS

The remote host is running an instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request with a malformed Authorization header, which causes a NULL pointer dereference error and crash...

Cisco VPN Concentrator ISAKMP Packet Remote DoS (Bug ID CSCdy38035)

Binary data 2248.prm...

GLSA-200402-07 : Clam Antivirus DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-07 Clam Antivirus DoS vulnerability Oliver Eikemeier of Fillmore Labs discovered the overflow in Clam AV 0.65 when it handled malformed UUEncoded messages, causing the daemon to shut down. The problem originated in libclama...

AIX 5.1 : IY36507

The remote host is missing AIX Critical Security Patch number IY36507 SECURITY: RPC service DOS vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Opera < 7.24 getElementsByTagName JavaScript Method DoS

The version of Opera installed on the remote host is vulnerable to a remote denial of service. An attacker may cause the browser to crash by crafting a rogue HTML page containing a specific JavaScript command. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14336;...

Computalynx CMail POP3 Server DELE Function DoS

Binary data 1795.prm...

Resin < 2.1s020604 MS-DOS Device Path Disclosure

Binary data 1517.prm...

StackDefender DoS

Invalid pointer dereference on few API hooks...

Mandrake Linux Security Advisory : MYSQL (MDKSA-2003:013)

Aleksander Adamowski informed MandrakeSoft that the MySQL developers fixed a DoS vulnerability in the recently released 3.23.55 version of MySQL. A double free pointer bug in the mysqlchangeuser handling would allow a specially hacked mysql client to crash the main mysqld server. This vulnerabili...

RHEL 2.1 : mailman (RHSA-2004:156)

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...

Inktomi Search MS-DOS Device Name Request Path Disclosure

This web server is running a vulnerable version of Verity Ultraseek formerly Inktomi Search. Certain requests using MS-DOS special file names such as NUL can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be...

[security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01051 REVISION: 0 SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack -------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

FreeBSD Alpha DoS

Unaligned execve argument causes system to crash...

NetGear FVS318/Microsoft MN-500 Web interface DoS

Limitation for connection number prior authentication without timeouts...

thy DoS

Incomplete URL causes program to crash...

Cisco IPsec VPNSM vulnerable to DoS via malformed IKE packet

Overview A vulnerability in a Cisco VPN module can allow a remote attacker to cause a denial-of-service to the device in which the module is installed. Description The Cisco IP Security IPsec VPN Services Module VPNSM is a high-speed module for the Cisco Catalyst 6500 Series Switch and the Cisco...