179 matches found
UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability
Gentoo Linux Security Advisory UPDATE GLSA 200506-17:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
CVE-2005-2024
Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...
CVE-2005-2024
CVE-2005-2024 affects Razor (razor-agents) prior to version 2.70. The vulnerability is a remote denial-of-service caused by Razor’s handling of certain email headers and unusual HTML messages (malformed headers such as Content-Type). Debian advisories (DSA-738-1) describe the issue as a remote DO...
CVE-2005-2024
Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...
DEBIAN-CVE-2005-2024
Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...
CVE-2005-2024
Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...
CVE-2005-0133
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...
security flaw
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...
CVE-2005-0133
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...
Squid < 2.5.STABLE8 Multiple Vulnerabilities
According to its version number, the remote Squid caching proxy is affected by several security flaws : - There is a buffer overflow when handling the reply of a rogue gopher site. CVE-2005-0094 - There is a denial of service vulnerability in the WCCP code of the remote proxy. CVE-2005-0095 - The...
CVE-2002-0193
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error...
MPlayer 0.9/1.0 - Streaming ASX Header Parsing Buffer Overrun
source: https://www.securityfocus.com/bid/8702/info A vulnerability has been discovered in MPLayer when handling malformed streaming ASX file headers. The problem occurs due to insufficient bounds checking performed within asfhttprequest. It has been demonstrated that it is possible for a remote...
CVE-2003-0239
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...
Apache 2 Cross-Site Scripting
This is being submitted without an update to Apache, but I am expecting an Apache Update Announcement shortly. The CVE has already assigned a candidate to this it is currently reserved, and CERT has assigned VU240329, but has not created a write-up yet. The reason for the ugly mail2web .sig is...
CVE-2002-0188
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error...
CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers...
CVE-1999-0867
CVE-1999-0867 describes a denial of service affecting IIS 4.0 caused by a flood of HTTP requests with malformed headers. The available connected documents corroborate a remote DoS scenario, originating from malformed header handling in IIS 4.0. The core vulnerability is the server’s inability to ...