IBM Windows XP OEM version backdoor account

During installation backdoor account is created with administrative privileges and empty password...

TYPSoft FTP Server Empty Username DoS

The remote host seems to be running TYPSoft FTP server, version 1.10. This version is prone to a remote denial of service flaw. By sending an empty login username, an attacker can cause the FTP server to crash, denying service to legitimate users. C Tenable Network Security, Inc...

CVE-2002-1284

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...

IBM DB2 DTS To String Conversion - Denial of Service

IBM DB2 DTS To String Conversion - Denial of Service source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty...

CVE-2002-1284: Undefined Security Weakness

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...

IBM DB2 DTS To String Conversion - Denial of Service

source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is provided. The vulnerability is...

CVE-2004-0724: Undefined Security Weakness

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

security flaw

servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...

CVE-2004-0182

Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...

CVE-2004-0182

Removed by vendor...

CVE-2004-0182: Undefined Security Weakness

Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...

Important: Red Hat Security Advisory: mailman security update

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...

CVE-2004-0252: Undefined Security Weakness

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

Proofpoint protection server unauthorized access

User root with empty password can access mySQL...

TYPSoft FTP Server 1.10 may be crashed

Application: TYPSoft FTP Server http://www.typsoft.com Version: 1.10 Bug: Denial Of Service Author: intuit e-mail: [email protected] web/forum: http://code.unixserver.at 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...

TypSoft FTP DoS

DoS on empty username...

Linksys WRT54G Empty GET Request Remote DoS

It is possible to freeze the remote web server by sending an empty GET request. This is known to affect Linksys WRT54G routers. TRUSTED...

wzdftpd DoS

DoS он PORT or USER command with empty argument...

Multiple bugs in ST FTP

Buffer overflow on oversized username, unauthorized access if username is empty...

Abyss Web Server Malformed GET Request Remote DoS

It was possible to kill the remote web server by sending empty HTTP request headers namely Connection: or Range:. An attacker may use this flaw to crash the affected application, thereby denying service to legitimate users. C Tenable Network Security, Inc. References: Date: Sat, 5 Apr 2003 12:21:...