kernel: sctp: do not reset the packet during sctp_packet_config

The sctppacketconfig function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service panic via a certain sequence of SCTP traffic...

CVE-2010-3760

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash...

Null pointer dereference

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash...

CVE-2010-3752

The CVE entry concerns Openswan, specifically the client-side xauth processing in openswan 2.6.25–2.6.28, where remote authenticated gateways could cause remote code execution via shell metacharacters embedded in Cisco-related data fields (cisco_dns_info and cisco_domain_info). Public references ...

IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of IBM Tivoli FastBack Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within FastBackServer.exe process which listens by default on TCP po...

Code injection

Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances ASA 5580 series devices with software 8.12 allows remote attackers to cause a denial of service watchdog traceback via a large amount of small-packet data, aka Bug ID CSCsu11412...

CVE-2006-4006

The dogameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the sendpkg function packets.c to use this data size when sending a reply, and allows remote attackers to read portions of server memory...

CVE-2006-4006

The dogameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the sendpkg function packets.c to use this data size when sending a reply, and allows remote attackers to read portions of server memory...

CVE-2006-4006

The CVE-2006-4006 issue affects BomberClone, specifically version 0.11.6 and earlier. The root cause is in do_gameinfo, which fails to reset the packet data size, causing send_pkg (packets.c) to use an incorrect data size when replying. This behavior can allow remote attackers to read portions of...

CVE-2005-0470

Buffer overflow in wpasupplicant before 0.2.7 allows remote attackers to cause a denial of service segmentation fault via invalid EAPOL-Key packet data...

[security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01051 REVISION: 0 SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack -------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

Digital Reality Game Engine 1.0.x - Remote Denial of Service

Digital Reality Game Engine 1.0.x - Remote Denial of Service // source: https://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...