CVE-2007-2026

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...

Code injection

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...

CVE-2007-2026

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...

CVE-2007-2026

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...

CVE-2007-2026

The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service CPU consumption via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported fo...

CVE-2007-2026

CVE-2007-2026 concerns the file package (GNU regex in file 4.20). A context-dependent attacker can cause CPU denial of service by feeding a crafted document with many line feeds; OS/2 REXX regex handling is implicated. Public fixes are noted in Debian advisories (fixed in 4.17-5etch3 for etch and...

CVE-1999-0718

The CVE-1999-0718 entries describe IBM GINA used for OS/2 domain authentication of Windows NT users, where local users can gain administrator privileges by changing the GroupMapping registry key. This is the explicit vulnerability mechanism: alteration of GroupMapping to escalate privileges. Conn...

CVE-1999-0718

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key...

Apache < 2.0.46 on OS/2 filestat.c Device Name Request DoS

Binary data 1535.prm...

Apache 2.0.x < 2.0.46 on OS/2 filestat.c Device Name Request DoS

The remote host appears to be running a version of Apache 2.0.x that is prior to 2.0.46 on OS/2. There is a vulnerability specific to such versions running on OS/2 in 'filestat.c' that could allow an attacker to disable this service remotely. Note that Nessus solely relied on the version number o...

CVE-2001-1342

Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service GPF via an HTTP request for a URI that contains a large number of / slash or other characters, which causes certain functions to dereference a null pointer...

CVE-2001-1342

Apache httpd before 1.3.20 on Windows and OS/2 is vulnerable to a denial-of-service via a crafted URI containing many slashes or other characters, which causes dereferencing of a NULL pointer in certain functions. The issue leads to a General Protection Fault in a child process when handling the ...

Lotus Domino vulnerable to a denial of service via DOS device request

Overview The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial-of-service situation on the Windows and OS/2 Platforms. Description With the Lotus Domino Web Server, you can access DOS-devices. If this is done through the cgi-bin directory, a ncgihttp.exe process wi...

CVE-2001-1342

Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service GPF via an HTTP request for a URI that contains a large number of / slash or other characters, which causes certain functions to dereference a null pointer...

CVE-1999-0718

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key...

sonata.teleconf.txt

Vulnerability Report For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 10/31/2000 Advisory ID: 10132000-01 CVE CAN: None currently assigned. Title: Multiple Vulnerabilities found in Sonata teleconferencing Application. Class: Design Error Remotely...

Переполнение буфера в FTP сервере OS/2

Переполнение буфера при длинном имени пользователя при второй попытке входа...

OS/2 Warp 4.5 FTP Server DoS

OS/2 Warp 4.5 FTP Server DoS Advisory Code: VIGILANTE-2000006 Release Date: August 15, 2000 Systems Affected: - OS/2 Warp 4.5 FTP server V4.0/4.2 - OS/2 Warp 4.5 FTP server V4.3 - Probably other versions of the software as well. THE PROBLEM The FTP server that comes with OS/2 Warp 4.5 TCP/IP can ...

VIGILANTE-2000006.txt

OS/2 Warp 4.5 FTP Server DoS Advisory Code: VIGILANTE-2000006 Release Date: August 15, 2000 Systems Affected: - OS/2 Warp 4.5 FTP server V4.0/4.2 - OS/2 Warp 4.5 FTP server V4.3 - Probably other versions of the software as well. THE PROBLEM The FTP server that comes with OS/2 Warp 4.5 TCP/IP can ...

CVE-1999-0654

The CVE-1999-0654 issue concerns the OS/2 or POSIX subsystem being enabled in Windows NT. Affected component: the NT OS/2/POSIX subsystem; root cause: this subsystem remains enabled, creating potential access to the system. The metric indicates a high-severity impact with complete confidentiality...