SuSE 11.1 Security Update : openSLP (SAT Patch Number 3312)

The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration...

Microsoft Exchange Server DoS

Endless loop on RPC request processing...

SuSE 11 Security Update : openslp (SAT Patch Number 3317)

The openslp daemon could run into an endless loop when receiving specially crafted packets. CVE-2010-3609 Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration options to openSLP:...

SuSE 10 Security Update : openslp (ZYPP Patch Number 7187)

The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - This openSLP update extends the net.slp.isDABackup mechanism introduced with the previous update by a new...

IBM OmniFind Crawler Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ==================================================== IBM OmniFind Crawler Denial of Service Vulnerability ==================================================== Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site wi...

IBM OmniFind Cross Site Scripting / Privilege Escalation

============================================ ||| Security Advisory ||| ||| CVE-2010-3890 CVE candidate ||| ||| CVE-2010-3891 CVE candidate ||| ||| CVE-2010-3892 CVE candidate ||| ||| CVE-2010-3893 CVE candidate ||| ||| CVE-2010-3894 CVE candidate ||| ||| CVE-2010-3895 CVE candidate ||| |||...

IBM OmniFind Crawler - Denial of Service

Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of service. The same site will be...

IBM OmniFind Crawler - Denial of Service

IBM OmniFind Crawler - Denial of Service Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a...

SuSE 10 Security Update : perl-HTML-Parser (ZYPP Patch Number 6622)

Specially crafted HTML documents could cause perl-HTML-Parser to run into an endless loop. CVE-2009-3627 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49915;...

Qt 'QSslSocketBackendPrivate::transmit()' Denial of Service Vulnerability

Qt is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Qt 'QSslSocketBackendPrivate::transmit()' Denial of Service Vulnerability

This host is installed with Qt and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbqtdosvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Qt 'QSslSocketBackendPrivate::transmit' Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

Qt 4.6.3 - QSslSocketBackendPrivate::transmit() Denial of Service

Qt 4.6.3 - QSslSocketBackendPrivate::transmit Denial of Service Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server...

Qt 4.6.3 - 'QSslSocketBackendPrivate::transmit()' Denial of Service

Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server Date: 29 Jun 2010 Author: Luigi Auriemma e-mail:...

SuSE 10 Security Update : pyxml (ZYPP Patch Number 6714)

Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. CVE-2009-3720 / CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE Security Update : pyxml (pyxml-1670)

Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml CVE-2009-3720, CVE-2009-3560. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

SuSE 11 Security Update : pyxml (SAT Patch Number 1673)

Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. CVE-2009-3720 / CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

openSUSE Security Update : perl-HTML-Parser (perl-HTML-Parser-1491)

Specially crafted HTML documents could cause perl-HTML-Parser to run into an endless loop CVE-2009-3627. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-HTML-Parser-1491. The text...

SuSE 11 Security Update : perl-HTML-Parser (SAT Patch Number 1495)

Specially crafted HTML documents could cause perl-HTML-Parser to run into an endless loop. CVE-2009-3627 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novel...

openSUSE 10 Security Update : expat (expat-6613)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat CVE-2009-3720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update expat-661...

openSUSE Security Update : expat (expat-1490)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat CVE-2009-3720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update expat-149...