Mandrake Linux Security Advisory : wireshark (MDKSA-2007:145)

A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or exhaustion of system memory. This updated provides wireshark 0.99.6 which is not vulnerable to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Novell NetWare NFS denial of service vulnerability

Overview The Novell NetWare NFS mount daemon contains a denial of service vulnerability. Description Network File System NFS is an ONC RPC based file and print sharing protocol. Novell Netware includes support for the NFS protocol.From Novell Support Document 3008097: If an NFS client attempts a...

Novell SecureLogin < 6.0.106 Multiple Vulnerabilities

The version of Novell SecureLogin installed on the remote host is earlier than 6.0.106. Such versions reportedly grant a user excessive permissions to their own attributes in an Active Directory AD environment. There is also a security issue with AD password change. Note that Novell strongly...

Sami HTTP Server 2.0.1 (HTTP 404 - Object not found) DoS Exploit

No description provided by source. !/usr/bin/env python import socket print "-----------------------------------------------------------------------" print "Sami HTTP Server HTTP 404 - Object not found Denial of Service" print "url: http://www.karjasoft.com" print "author: shinnai" print "mail:...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-1672

The installation of Cisco Transport Controller CTC for Cisco Optical Networking System ONS 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute...

CVE-2006-1285

SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information...

EFTP < 2.0.8.x Buffer Overflow Vulnerability

It was possible to crash the EFTP service by uploading a .lnk file containing too much data. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-0653

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended...

Ocean FTP Server DoS

Large number of established conenction causes server to crash...

CVE-2004-1727

BadBlue 2.5 allows remote attackers to cause a denial of service refuse HTTP connections via a large number of connections from the same IP address...

CVE-2004-1556

MyWebServer 1.0.3 allows remote attackers to cause a denial of service application crash via a large number of connections within a short time...

security flaw

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

CVE-2004-1556

MyWebServer 1.0.3 allows remote attackers to cause a denial of service application crash via a large number of connections within a short time...

Timbuktu DoS

Large number of connections causes service to crash...

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service // source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the ga...

RealVNC 4.0 DoS

It will cause RealVNC server die if there are more than 60 connections. Tested against RealVNC serveron W2k using the following script: for i in seq 1 61 do nc serverip 5900 done This will impact version before 4.0 also. Thanks Allan...

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from...