4113 matches found
isec-0018-igmp.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux kernel IGMP vulnerabilities Product: Linux kernel Version: 2.4 up to and including 2.4.28, 2.6 up to and including 2.6.9 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0018-igmp.txt CVE: CAN-2004-1137 Author:...
Debian DSA-613-1 : ethereal - infinite loop
Brian Caswell discovered that an improperly formatted SMB packet could make ethereal hang and eat CPU endlessly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-613. The text itself is...
CVE-2004-1016
The scmsend function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service system hang via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition...
Linux kernel IGMP vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux kernel IGMP vulnerabilities Product: Linux kernel Version: 2.4 up to and including 2.4.28, 2.6 up to and including 2.6.9 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0018-igmp.txt CVE: CAN-2004-1137 Author:...
ethereal -- multiple vulnerabilities
An Ethreal Security Advisories reports: Issues have been discovered in the following protocol dissectors: Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash. An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling availab...
CVE-2004-0558
The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...
Pigeon Server DoS
Oversized username causes server to hang...
CVE-2002-1265
CVE-2002-1265 is evidenced in HP-UX RPC-related DoS advisories; OpenVAS/Nessus entries (PHNE_30091/30092/30093/30094, and PHKL_31500) reference CVE-2002-1265 as the RPC/HP-UX RPC DoS issue. Patches exist (HPSBUX01020 SSRT2384, etc.; PHKL_31500 consolidates fixes) addressing remote DoS via HP-UX R...
Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service
source: https://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server. A remote attacker may cause a denial of service condition i...
Mandrake Linux Security Advisory : apache2 (MDKSA-2003:096-1)
A problem was discovered in Apache2 where CGI scripts that output more than 4k of output to STDERR will hang the script's execution which can cause a Denial of Service on the httpd process because it is waiting for more input from the CGI that is not forthcoming due to the locked write call in...
CVE-2004-0651
Unknown vulnerability in Sun Java Runtime Environment JRE 1.4.2 through 1.4.203 allows remote attackers to cause a denial of service virtual machine hang...
Norton AntiVirus DoS
Programs hangs with 100 on malcrafted executable file...
Symantec personal firewalls DoS
TCP packets with some options of zero langth causes system to hang...
Sun Solaris contains a vulnerability in the tcsetattr() library function
Overview A vulnerability in the Sun Solaris tcsetattr library function could allow a unprivileged local user to cause the system to hang. Description Sun Solaris uses a tcsetattr library function to set the parameters associated with the terminal. There is an unspecified vulnerability in the...
CVE-2004-0268
CVE-2004-0268 affects EvolutionX versions 3921 and 3935. The vulnerability consists of multiple buffer overflows that allow a remote attacker to cause a denial of service (hang) by sending a long cd command to the FTP server or a long dir command to the Telnet server. The available records do not...
Windows Media Services DoS
Specially crafted TCP packets sequence causes service to hang...
CesarFTP DoS
Server hangs on CWD ......... command...
ACLogic CesarFTP 0.99 - Remote Resource Exhaustion (Denial of Service)
ACLogic CesarFTP 0.99 - Remote Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/9666/info It has been reported that CesarFTP is prone to a remote resource exhaustion vulnerability. This issue is due to the application failing to properly validate user input...
mysql -- ALTER MERGE denial of service vulnerability
Dean Ellis reported a denial of service vulnerability in the MySQL server: Multiple threads ALTERing the same or different MERGE tables to change the UNION eventually crash the server or hang the individual threads. Note that a script demonstrating the problem is included in the MySQL bug report...