OpenBSD LibreSSL input validation error vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain an input validation error vulnerability. This vulnerability arises because url2host fails to reject control characters when copying paths, and httpopen incorporates them into POST request lines. Attackers can embed CR/LF sequences within the AIA...

EUVD-2007-0576

Malware in sbrugna...

MPG123 HTTP_Open()连接处理拒绝服务漏洞

MPG123是一款媒体播放程序。 MPG123包含的HTTPOpen存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者可以利用恶意服务器，诱使MPG123打开处理，进行拒绝服务攻击。 mpg123 mpg123 0.59 s + Gentoo Linux mpg123 mpg123 0.59 r + Conectiva Linux 8.0 + Conectiva Linux 7.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0...

Design/Logic Flaw

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

CVE-2007-0578 affects mpg123 (http_open in httpget.c) where closing the HTTP connection early can cause an infinite loop, leading to DoS. Vulnerable version: mpg123 before 0.64. Public references in Mandriva (MDKSA-2007:032) indicate patches were released to fix the issue; other sources (SUSE, NV...

CVE-2007-0578: Undefined Security Weakness

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2004-1034: Undefined Security Weakness

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...