12 matches found
Heap overflow
Heap-based buffer overflow in the sampsend function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information...
CVE-2007-5723
Heap-based buffer overflow in the sampsend function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information...
Authentication flaw
nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service service hang by flooding packets at the authentication server...
CVE-2006-0956
nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service service hang by flooding packets at the authentication server...
CVE-2006-0956
Removed by vendor...
CVE-2006-0956
NuFW (nuauth) before version 1.0.21 is affected by a denial-of-service vulnerability where blocking TLS sockets are not handled correctly, allowing remote authenticated users to cause a service hang by flooding packets at the authentication server. The issue is limited to the NuFW nuauth componen...
CVE-2006-0956: Undefined Security Weakness
nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service service hang by flooding packets at the authentication server...
CVE-2005-3950
CVE-2005-3950 affects NuFW’s nuauth component: versions 1.0.x prior to 1.0.16 and the 1.1 line are susceptible to a denial-of-service via malformed packets sent by authenticated users over the network. The issue is mitigated by applying the vendor fix (NuFW 1.0.16 and later / 1.1 line as applicab...
CVE-2005-3950
nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets...
CVE-2005-3950
Removed by vendor...
