336 matches found
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...
SureCom EP-9510AX/EP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (2)
// source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a...
iSoft-Solutions QuikStore Shopping Cart 2.12 - 'store' Full Path Disclosure
source: https://www.securityfocus.com/bid/9282/info It has been reported that QuikStore Shopping Cart may be prone to an information disclosure vulnerability due to insufficient sanitization of user-supplied data through the 'store' parameter of the 'quikstore.cgi' script. An attacker may dislcos...
SX Design sipd 0.1.2 - Remote Denial of Service
SX Design sipd 0.1.2 - Remote Denial of Service source: https://www.securityfocus.com/bid/9198/info It has been reported that sipd may be prone to a vulnerability that may allow a remote attacker to cause a denial of service condition in the software. The problem is reported to exist in the...
SX Design sipd 0.1.2 - Remote Denial of Service
source: https://www.securityfocus.com/bid/9198/info It has been reported that sipd may be prone to a vulnerability that may allow a remote attacker to cause a denial of service condition in the software. The problem is reported to exist in the gethostbynamer function. An attacker may be able to...
CVE-2003-0715
Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...
CVE-2003-0764
Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...
CVE-2003-0764
The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...
Linux 2.4 NFSv3 knfsd Malformed GETATTR Request Remote DoS
The remote host is running knfsd, a kernel NFS daemon. There is a vulnerability in this version that may allow an attacker to cause a kernel panic on the remote host by sending a malformed GETATTR request with an invalid length field. C Tenable Network Security, Inc. include"compat.inc"; if...
3ware Disk Managment 1.10 - HTTP Request Denial of Service
3ware Disk Managment 1.10 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause t...
CVE-2002-1029
Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service crash via a malformed request to TCP port 17990...
CVE-2002-1029
Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service crash via a malformed request to TCP port 17990...
Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (2)
Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow 2 source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow...
Worldspan for Windows Gateway Res Manager Port 17990 Malformed Request DoS
It was possible to crash the Worldspan gateway by sending illegal data. An attacker may use this attack to make this service crash continuously. C Tenable Network Security, Inc. This script was written by Michel Arboi , starting from quake3dos.nasl and a proof of concept code by Script audit and...
BufferOverflow in OmniHTTPd 2.09
Hi there. The OmniHTTPd v2.09 of Omnicron www.omnicron.ca contains a problem with handling long HTTP versions which causes a denial of service. Found this problem while developing a new plugin for BED Bruteforce Exploit Detector,www.kryptocrew.de/snakebyte/bed.html. Problem When sending a malform...
Apache Tomcat 3.2.33.2.4 - Source.jsp Information Disclosure
Apache Tomcat 3.2.33.2.4 - Source.jsp Information Disclosure source: https://www.securityfocus.com/bid/4876/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. Under some circumstances, Tomcat may yield sensitive information about the web server...
Cisco Content Service Switch DoS
Malfromed POST request to web managment interface can cause device to reboot...
National Instruments LabVIEW 5.1.16.06.1 - HTTP Request Denial of Service
National Instruments LabVIEW 5.1.16.06.1 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a...
National Instruments LabVIEW 5.1.1/6.0/6.1 - HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a malformed HTTP request is received, it is possible to crash the LabVIEW Web Serv...