MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:219 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.1 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...

MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:218 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have...

CVE-2005-3899

CVE-2005-3899 concerns Google Talk’s automatic update mechanism. The vulnerability allows remote attackers to trigger a denial of service by poisoning a target’s DNS cache and forcing a large update file to be processed, which consumes CPU and memory during signature verification. The provided do...

Linux Kernel 2.6.x - Time_Out_Leases PrintK Local Denial of Service

/ source: https://www.securityfocus.com/bid/15627/info Linux kernel is susceptible to a local denial-of-service vulnerability. Local attackers may trigger this issue by obtaining numerous file-lock leases, which will consume excessive kernel log memory. Once the leases timeout, the event will be...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2002-2174

The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...

Apache Input Header Folding and mod_ssl ssl_io_filter_cleanup DoS Vulnerabilities

The remote host appears to be running a version of Apache 2.x which is older than 2.0.50. There is denial of service in apache httpd 2.0.x by sending a specially crafted HTTP request. It is possible to consume arbitrary amount of memory. On 64 bit systems with more than 4GB virtual memory this ma...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service crash via 1 malformed packets and possibly other unspecified issues with unknown impact and attack vectors including 2 use of "" in a pathname, and 3 memory consumption of the daemon. NOTE: it is not clear whether item...

CVE-2005-3467

CVE-2005-3467 affects Serv-U FTP Server prior to 6.1.0.4. The vulnerability enables a denial-of-service (crash) via malformed packets and potentially other issues with unknown impact; a second vector involves the use of a tilde (~) in a pathname, and a third involves memory consumption of the dae...

CVE-2005-3245

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-3241

Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service memory consumption via unspecified vectors in the 1 ISAKMP, 2 FC-FCS, 3 RSVP, and 4 ISIS LSP dissector...

CVE-2005-3241

Summary: CVE-2005-3241 affects Ethereal 0.10.12 and earlier. The vulnerability involves memory-exhaustion denial of service in the FC-FCS, RSVP, and ISIS-LSP dissectors (and related disclosures across other dissectors). The Debian, Gentoo, OpenVAS, Red Hat, and SLES advisories in the connected do...

CVE-2005-3245

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

security flaw

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

CVE-2004-2505

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service memory consumption and crash by sending repeated GET or POST requests that trigger error messages that use long strings of data...

PT-2005-3811 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Apache 2 affected versions not specified Description: A memory leak in the worker MPM allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from bei...

CVE-2005-3181

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIGAUDITSYSCALL is enabled, uses an incorrect function to free namescache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denia...

Fedora Core 4 : httpd-2.0.54-10.2 (2005-849)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...