9869 matches found
CVE-2010-0305
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
UBUNTU-CVE-2010-0305
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
CVE-2010-0305
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
DEBIAN-CVE-2010-0305
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
Default configuration
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
CVE-2010-0305
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
CVE-2010-0305: Improper Input Validation
ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...
ejabberd -- queue overload denial of service vulnerability
The Red Hat security response team reports: A remotely exploitable DoS from XMPP client to ejabberd server via too many "client2server" messages causing the message queue on the server to get overloaded, leading to server crash has been found...
CVE-2009-4133
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...
CVE-2009-4133
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...
Condor: queue super user cannot drop privs
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...
Condor: queue super user cannot drop privs
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...
OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...
Chipmunk Newsletter CSRF Vulnerabilities
No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...
Design/Logic Flaw
Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...
OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...
Buffer overflow
Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request...
CVE-2009-0896: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request...
FreeBSD : cups -- print queue browser denial-of-service (05dcf751-0733-11d9-b45d-000c41e2cdad)
If the CUPS server cupsd receives a zero-length UDP message, it will disable its print queue browser service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...