CVE-2014-2852

OpenAFS prior to 1.6.7 delays the listen thread when an RXS_CheckResponse fails, enabling a remote attacker to cause denial of service (performance degradation) via an invalid packet. Multiple connected sources corroborate this issue and its association with CVE-2014-2852, with remediation docume...

CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-2852

OpenAFS before 1.6.7 delays the listen thread when an RXSCheckResponse fails, which allows remote attackers to cause a denial of service performance degradation via an invalid packet...

CVE-2014-0722

The log4jinit web application in Cisco Unified Communications Manager UCM does not properly validate authentication, which allows remote attackers to cause a denial of service performance degradation via unspecified use of this application, aka Bug ID CSCum05347...

CVE-2014-0722

The log4jinit web application in Cisco Unified Communications Manager UCM does not properly validate authentication, which allows remote attackers to cause a denial of service performance degradation via unspecified use of this application, aka Bug ID CSCum05347...

Drupal Stage File Proxy模块拒绝服务漏洞

Bugtraq ID:61080 Drupal是使用PHP语言编写的开源内容管理框架，它由内容管理系统和PHP开发框架共同构成 Drupal Stage File Proxy模块存在一个拒绝服务漏洞，允许攻击者长时间重复向服务器提交多次请求，会降低所有文件操作的性能，也可能使得某些文件操作不能使用，造成拒绝服务攻击 0 Drupal Stage File Proxy 7.x-1.x 厂商解决方案 Drupal Stage File Proxy 7.x-1.4已经修复此漏洞，建议用户下载更新： http://drupal.org/project/stagefileproxy...

Adobe Flash Player Flash Plugin Cross-Domain Information Leak (APSB12-19; CVE-2012-4168)

A cross-domain information leak vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Flash Player while handling specially crafted .swf files. A remote attacker can exploit this issue by enticing a target user to open a malicious website containing a...

Researchers Propose New Steganography System for Hiding Data

A group of researchers has developed a new application that can hide sensitive data on a hard drive without encrypting it or leaving any obvious signs that the data is present. The new steganography system relies on the old principle of hiding valuables in plain sight. Developed by a group of...

Sophos Anti-Virus ZIP File Handling Denial of Service (CVE-2005-1530)

Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...

Opera Web浏览器位图文件RLE远程拒绝服务漏洞

BUGTRAQ ID: 26721 Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形的BMP文件时存在漏洞，可能导致系统一定时间的性能大幅下降。 BMP文件允许游程长度编码4位和8位的位图。BMP格式中所使用的RLE有一些额外的功能，如移动到其他行和列的写指针（00 02 XX YY）。Opera实现00 02 XX YY功能的算法过于缓慢，正常解压算法是将XX和YY width添加到写指针，而Opera的实现要执行XX + YY width递增，每次递增都要执行自己的检查和其他计算。 攻击者可以创建最大宽度（约32000像素）的BMP文件，用00 02 FF F...

Linksys multiple remote vulnerabilities

The remote router is affected by multiple flaws. Description : The remote host appears to be a Linksys WRT54G Wireless Router. The firmware version installed on the remote host is prone to several flaws, - Execute arbitrary commands on the affected router with root privilages. - Download and...

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service

// source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneous TCP acknowledgement number is encountered in an active TCP session...

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service // source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneou...

Chunked encoding post can consume excessive memory on IIS 4.0 webserver

Overview Microsoft IIS 4.0, circa March 2000, contained a vulnerability that allowed an intruder to consume unlimited memory on a vulnerable server. Description Older versions of IIS 4.0, circa March 2000, contained a vulnerability in the chunked-encoding transfer mechanism that permitted an...

Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Internet Router Revision 1.0 For Public Release 2001 November 14 08:00 UTC -0800 Summary The performance of Cisco 12000 series routers can be degraded when they have to send a large...

Product Security Bulletin (MPSB01-07)

Macromedia Product Security Bulletin MPSB01-07 Macromedia releases patch that addresses ColdFusion Server security issues. Originally Posted: July 11, 2001 Summary Macromedia has released a patch that addresses two ColdFusion Server security issues which affect all server versions from 2.0 throug...