CVE-2004-0744

CVE-2004-0744 is referenced in HP-UX advisories as a remote Denial of Service vulnerability in TCP/IP (Rose/fragment attack). The HP-UX impact concerns B.11.00, B.11.04, B.11.11, and B.11.23 running TCP/IP, with patchesPHNE_30161, PHNE_33427, PHKL_31500 (and related updates) required to mitigate....

Mandrake Linux Security Advisory : tcpdump (MDKSA-2004:008)

A number of vulnerabilities were discovered in tcpdump versions prior to 3.8.1 that, if fed a maliciously crafted packet, could be exploited to crash tcpdump or potentially execute arbitrary code with the privileges of the user running tcpdump. These vulnerabilities include : An infinite loop and...

CVE-2004-0413

CVE-2004-0413 affects Subversion 1.0.4 libraries (libsvn_ra_svn). The vulnerability arises because libsvn_ra_svn trusts the length field of svn://, svn+ssh://, and other svn protocol URL strings, enabling a remote attacker to trigger an integer overflow that leads to a heap-based buffer overflow....

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0116

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...

CVE-2004-0116

CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...

CVE-2004-0403

Removed by vendor...

CVE-2004-0403

The CVE-2004-0403 issue affects ipsec-tools’ racoon ISAKMP daemon. A remote attacker can overwhelm memory by sending an ISAKMP packet with a large length field, leading to denial of service. Affected product: racoon (part of ipsec-tools) prior to 20040408a. Root cause: ISAKMP header length field ...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0116

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...

CVE-2004-1922

Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service memory consumption via a small BMP file with has a large memory size...

[Full-Disclosure] MondoSoft - MsmHigh.exe - Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Topic: MondoSoft - MsmHigh.exe - Denial of Service Application : MondoSearch versions prior to 5.1b Author: Dennis Rand dra at protego.dk Advisory URL: http://www.protego.dk/advisories/200402.html Vendor Name: MondoSoft Vendor URL:...

[Full-Disclosure] MondoSoft - MsmLink.exe - Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Topic: MondoSoft - MsmLink.exe - Denial of Service Application : MondoSearch versions prior to 5.1b Author: Dennis Rand dra at protego.dk Advisory URL: http://www.protego.dk/advisories/200403.html Vendor Name: MondoSoft Vendor URL:...

CVE-2004-1815

Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...

CVE-2004-1816

Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...

FreeBSD-SA-04:04.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:04.tcp Security Advisory The FreeBSD Project Topic: many out-of-sequence TCP packets denial-of-service Category: core Module: kernel Announced: 2004-03-02...

[SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 425-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 16th, 2004 http://www.debian.org/security/faq -...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

CVE-2003-1342

Trend Micro Virus Control System TVCS 1.8 running with IIS allows remote attackers to cause a denial of service memory consumption in IIS via multiple URL requests for ActiveSupport.exe...

Remote crash in tcpdump from OpenBSD

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------- Original Message -------- Subject: user/3610: repetable tcpdump remote crash Resent-Date: Sat, 20 Dec 2003 08:55:02 -0700 MST Resent-From: [email protected] GNATS Filer Resent-To: [email protected] Date: Sat, 20 Dec 2003 16:42:25 +01...