5693 matches found
CVE-2003-0854
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...
CVE-2003-0793
The CVE-2003-0793 issue affects GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7, where input size is not restricted, allowing a local attacker to cause a denial of service via memory consumption. Publicly cited references (Slackware/Mandrake/MDV) confirm local user impact (crash/freeze) and...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
CVE-2003-0775
CVE-2003-0775 affects sane-backends (notably the saned daemon) up to version 1.0.7 and earlier. The root cause is that saned mallocs memory based on a size value, which can be sent, or may be left unknown if the connection is dropped before the size is transmitted, enabling remote attackers to tr...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...
DSA-379 sane-backends - several vulnerabilities
Bulletin has no description...
CVE-2003-0572
Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...
CVE-2003-0572
The CVE-2003-0572 issue concerns the SGI IRIX Name Service Daemon (nsd). The SGI advisory notes multiple nsd vulnerabilities in IRIX 6.5.x up to 6.5.20f (and possibly earlier), with the specific CVECAN-2003-0572 issue described as dynamic maps in nsd that can be made to consume memory, leading to...
CVE-2003-0572
Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...
CVE-2003-0428
CVE-2003-0428 involves an unknown vulnerability in the DCERPC (DCE/RPC) dissector of Ethereal 0.9.12 and earlier. The issue allows remote attackers to cause a denial of service via memory consumption when decoding a crafted NDR string. Public sources describe the vulnerability across multiple adv...
PT-2003-1619 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue is related to a problem in the DCERPC DCE/RPC dissector, allowing remote attackers to cause a denial of service by consuming memory via a certain NDR string. Recommendations: For...
CVE-2003-0225
The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...
CVE-2003-0225
Affected software: Microsoft IIS 4.0 and 5.0. Vulnerable component: ASP Response.AddHeader handling, which fails to cap memory usage when constructing headers. Impact: remote attackers can craft an ASP page to generate a large header, causing memory exhaustion and denial of service. Root cause (p...
CVE-2003-0225
The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...
CVE-2002-0404
Ethereal (network traffic analyzer) is affected by a memory-consumption DoS in the GIOP dissector prior to version 0.9.3. Red Hat and Debian advisories summarize the issue as a vulnerability in Ethereal’s dissectors (GIOP), where memory allocation/consumption can be exploited remotely to impact a...