327 matches found
optima apiftp server <= 1.5.2.13 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Optima APIFTP Server http://www.optimalog.com/home.html Versions: = 1.5.2.13 Platforms: Windows Bugs: A NULL pointer B endless loop Exploitation: remote Date: 13 Nov 2011 Author: Luigi Auriemma e-mail: [email protected] web:...
SAP Sybase Adaptive Server Enterprise DoS (SAP Note 1887342)
An unauthenticated, remote attacker can trigger a condition in which SAP Sybase ASE enters an endless loop, causing it to consume all of the available processing time. This causes the entire machine to become unresponsive until the process is terminated manually. An attacker can use this flaw to...
Oracle Linux 5 : kernel (ELSA-2010-0398)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0398 advisory. - xen arpl on MMIO area crashes the guest Paolo Bonzini 572979 572982 CVE-2010-0730 - misc kernel: fix elf load DoS on x8664 Danny Feng 560552 560553...
Avira Antivir DoS
Endless loop on PDF processing...
FreeBSD : lighttpd -- remote DoS in header parsing (1cd3ca42-33e6-11e2-a255-5404a67eef98)
Lighttpd security advisory reports : Certain Connection header values will trigger an endless loop, for example : 'Connection: TE,,Keep-Alive' On receiving such value, lighttpd will enter an endless loop, detecting an empty token but not incrementing the current string position, and keep reading...
lighttpd -- remote DoS in header parsing
Lighttpd security advisory reports: Certain Connection header values will trigger an endless loop, for example: "Connection: TE,,Keep-Alive" On receiving such value, lighttpd will enter an endless loop, detecting an empty token but not incrementing the current string position, and keep reading th...
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Samsung NET-i ware 1.37 - Multiple Vulnerabilities Luigi Auriemma Application: Samsung NET-i ware http://www.samsungsecurity.com/product/productview.asp?idx=6447 http://www.samsungsecurity.com/product/productview.asp?idx=5828 Versions: = 1.37 Platforms: Windows Bugs: A Endless loop in remote...
optima apiftp server 1.5.2.13 - Multiple Vulnerabilities
Luigi Auriemma Application: Optima APIFTP Server http://www.optimalog.com/home.html Versions: = 1.5.2.13 Platforms: Windows Bugs: A NULL pointer B endless loop Exploitation: remote Date: 13 Nov 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Co...
optima apiftp server 1.5.2.13 - Multiple Vulnerabilities
optima apiftp server 1.5.2.13 - Multiple Vulnerabilities Luigi Auriemma Application: Optima APIFTP Server http://www.optimalog.com/home.html Versions: = 1.5.2.13 Platforms: Windows Bugs: A NULL pointer B endless loop Exploitation: remote Date: 13 Nov 2011 Author: Luigi Auriemma e-mail:...
acpid DoS
Large number of connections leads to endless loop...
Microsoft Host Integration Server DoS
Uninitialized pointer dereference, endless loop...
[SECURITY] [DSA 2237-2] apr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2237-2 [email protected] http://www.debian.org/security/ Stefan Fritsch May 21, 2011 http://www.debian.org/security/faq -...
Denial of Service Vulnerability in FlatnuX
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in FlatnuX which could be exploited to cause a denial of service. 1 Denial of service vulnerability in FlatnuX The vulnerability exists due to endless loop in the login.html script. A remote attacker can send a specially...
SuSE 11.1 Security Update : openSLP (SAT Patch Number 3312)
The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration...
Microsoft Exchange Server DoS
Endless loop on RPC request processing...
SuSE 11 Security Update : openslp (SAT Patch Number 3317)
The openslp daemon could run into an endless loop when receiving specially crafted packets. CVE-2010-3609 Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration options to openSLP:...
SuSE 10 Security Update : openslp (ZYPP Patch Number 7187)
The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - This openSLP update extends the net.slp.isDABackup mechanism introduced with the previous update by a new...
IBM OmniFind Crawler Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc ==================================================== IBM OmniFind Crawler Denial of Service Vulnerability ==================================================== Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site wi...
IBM OmniFind Cross Site Scripting / Privilege Escalation
============================================ ||| Security Advisory ||| ||| CVE-2010-3890 CVE candidate ||| ||| CVE-2010-3891 CVE candidate ||| ||| CVE-2010-3892 CVE candidate ||| ||| CVE-2010-3893 CVE candidate ||| ||| CVE-2010-3894 CVE candidate ||| ||| CVE-2010-3895 CVE candidate ||| |||...
IBM OmniFind Crawler - Denial of Service
Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of service. The same site will be...