CVE-2004-0264

palmhttpd for PalmOS allows remote attackers to cause a denial of service crash by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue...

CVE-2004-0264: Undefined Security Weakness

palmhttpd for PalmOS allows remote attackers to cause a denial of service crash by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue...

CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

Polycom ViaVideo Web Server Incomplete HTTP Connection Saturation Remote DoS

The remote web server locks up when several incomplete web requests are sent and the connections are kept open. Some servers e.g. Polycom ViaVideo even run an endless loop, using much CPU on the machine. Nessus has no way to test this, but you'd better check your machine. C Tenable Network...

Netgear Logging Vulnerability

Netgear logging vulnerability Introduction Tested Vulnerable Vendor Discussion PoC Stuff Introduction There is a problem in the way Netgear routers log outgoing HTTP connections which could lead to log corruption as well as dangerous character or script injection. Tested Vulnerable Model: RP114...

PHP local DoS: self-fetching throught HTTP

PHP scripting allows "opening" files througth HTTP: $file=fopen"http://host/page.html","r"; If script opening itself throught HTTP, it will result in DoS attack: as much as possible HTTP connections and great number of executing PHP scripts. Timeout settings are useless. Possible solutions: -...