8202 matches found
ejabberd -- remote denial of service vulnerability
It's reported in CVE advisory that: expaterl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML documen...
DEBIAN-CVE-2011-1097
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via malformed data...
rsync: Incremental file-list corruption due to temporary file_extra_cnt increments
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via malformed data...
Mandriva Update for wireshark MDVSA-2011:044 (wireshark)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1140
Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...
CVE-2011-1140: Undefined Security Weakness
Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...
PT-2011-2899
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.0.x, 1.2.0 through 1.2.14, 1.4.0 through 1.4.3 Description The issue allows remote attackers to cause a denial of service via a crafted packet. This can be achieved by exploiting the dissect ms compressed string and dissec...
Wireshark CLDAP Dissector DOS
This module causes infinite recursion to occur within the CLDAP dissector by sending a specially crafted UDP packet. Module Options msf use auxiliary/dos/wireshark/cldap msf undefinedcldap show actions ...actions... msf undefinedcldap set ACTION msf undefinedcldap show options ...show and set...
Nmap NSE: DNS Recursion
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
php: information leak vulnerability in var_export()
The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...
CVE-2010-3899
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service infinite loop via a crafted series of documents...
Design/Logic Flaw
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service infinite loop via a crafted series of documents...
CVE-2010-3899: Undefined Security Weakness
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service infinite loop via a crafted series of documents...
PT-2010-5153
Name of the Vulnerable Software and Affected Versions IBM OmniFind Enterprise Edition versions 8.x through 9.x Description The issue allows remote web servers to cause a denial of service, specifically an infinite loop, by providing a crafted series of documents. This is due to the software...
IBM OmniFind Crawler Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc ==================================================== IBM OmniFind Crawler Denial of Service Vulnerability ==================================================== Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site wi...
Design/Logic Flaw
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
CVE-2010-0218
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
PT-2010-2019
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.7.2 through 9.7.2-P1 Description The issue allows remote attackers to obtain potentially sensitive information via a DNS query due to an incorrect ACL used to restrict the ability of Recursion Desired RD queries to access t...
CVE-2010-0218: Undefined Security Weakness
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
