CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a 1 STARTTLS or 2 STLS request, which allows remote servers to cause a denial of service application hang by acknowledging the request but not sending additional packets...

CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a 1 STARTTLS or 2 STLS request, which allows remote servers to cause a denial of service application hang by acknowledging the request but not sending additional packets...

CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a 1 STARTTLS or 2 STLS request, which allows remote servers to cause a denial of service application hang by acknowledging the request but not sending additional packets...

CVE-2011-1947

CVE-2011-1947 affects fetchmail 5.9.9–6.3.19. The issue is an insufficient wait-time limiter after STARTTLS or STLS, allowing a remote server to trigger a denial-of-service (application hang) by acknowledging the request but sending no further packets. The provided documents confirm this vulnerab...

CVE-2011-1947: Undefined Security Weakness

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a 1 STARTTLS or 2 STLS request, which allows remote servers to cause a denial of service application hang by acknowledging the request but not sending additional packets...

PT-2011-3490

Name of the Vulnerable Software and Affected Versions fetchmail versions 5.9.9 through 6.3.19 Description The issue allows remote servers to cause a denial of service by acknowledging a STARTTLS or STLS request but not sending additional packets, resulting in an application hang. Recommendations...

Command injection

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon crash or hang via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration...

CVE-2010-4787

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

PT-2011-3391

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS version 5.2 before 5.2.0.5-TIV-ITDS-IF0010 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon hang, by performing a cn=changelog search. Recommendations F...

CVE-2011-1821: Undefined Security Weakness

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service daemon hang via a cn=changelog search...

PT-2011-1327

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS version 6.0 before 6.0.0.59 Description The issue allows remote authenticated users to cause a denial of service, resulting in an infinite loop and daemon hang, by adding a nested group that contains the...

PT-2011-1735

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 6.0.0 through 6.0.0.62 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon hang. This occurs when a paged search is performed, triggering improper...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:062)

Multiple vulnerabilities has been identified and fixed in ffmpeg : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allo...

CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

PT-2011-1708

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta7 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon hang, by performing a fulltext search. This is due to the improper...

CVE-2010-4759: Improper Input Validation

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

PT-2011-3045

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon hang, by performing close operations via network connections to a queue manager. This...

CVE-2011-1314: Undefined Security Weakness

The Service Integration Bus SIB messaging engine in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service daemon hang by performing close operations via network connections to a queue manager...

Code injection

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...