CVE-2006-0646: Undefined Security Weakness

ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...

DEBIAN-CVE-2006-0146

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PHPOpenChat, 7 MAXdev MD-Pro, and 8 MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via...

CVE-2005-4857

eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...

TYPSoft empty username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linksys WRT54G DoS

It is possible to freeze the remote web server by sending an empty GET request. This is know to affect Linksys WRT54G routers. OpenVAS Vulnerability Test $Id: linksysemptyGETDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Linksys WRT54G DoS Authors: Michel Arboi Copyright: Copyright C 20...

Symantec Discovery unauthorized database access

Few accounts with empty passwords are created during installation...

security flaw

The KEYCTLJOINSESSIONKEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service semaphore hang via a new session keyring 1 with an empty nam...

Hitachi Cosminexus logical bug

For HTTP POST request with empty body data from previous POST request is used...

NPE in SpaceHelper borks page....

If you have a url for Space admin : http://server.name.com/spaces/listdecorators.action?key=BP2I And you get the space key wrong, then rather than failing gracefully, you end up with an sitemesh decoration of an empty page.... Looking at the code, you can see why: public String getSpaceName retur...

CVE-2004-2391: Undefined Security Weakness

Jabber Gadu-Gadu Transport a.k.a. jabber-gg-transport 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty tag...

CVE-2004-2315: Undefined Security Weakness

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...

security flaw

Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service application crash via JavaScript that repeatedly calls an empty function...

FreeBSD : squid -- confusing results on empty acl declarations (a30e5e44-5440-11d9-9e1e-c296ac722cb3)

Applying an empty ACL list results in unexpected behavior : anything will match an empty ACL list. For example, The meaning of the configuration gets very confusing when we encounter empty ACLs such as acl something src '/path/to/emptyfile.txt' httpaccess allow something somewhere gets parsed wit...

CVE-2005-2114: Undefined Security Weakness

Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service application crash via JavaScript that repeatedly calls an empty function...

CVE-2002-1712: Undefined Security Weakness

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...

PT-2005-2798 · Todd Miller · Sudo

Name of the Vulnerable Software and Affected Versions: Sudo version 1.6.8p7 Description: The issue allows local users to potentially gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. However, it has been noted that Sudo catches SIGINT and returns an empt...

DEBIAN-CVE-2005-0194

Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...

CVE-2005-0852

Microsoft Windows XP SP1 allows local users to cause a denial of service system crash via an empty datagram to a raw IP over IP socket IP protocol 4, as originally demonstrated using code in Python 2.3...

CVE-2005-0852: Undefined Security Weakness

Microsoft Windows XP SP1 allows local users to cause a denial of service system crash via an empty datagram to a raw IP over IP socket IP protocol 4, as originally demonstrated using code in Python 2.3...

ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)

No description provided by source. / Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd = 0.8.1 Remote DoS ::: Coded by Expanders =- Connecting to target ...Done Building evil buffer ...Done...