CVE-2008-7288: Undefined Security Weakness

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

PT-2011-2797

Name of the Vulnerable Software and Affected Versions Mono versions prior to 2.4.1 Mono versions prior to 3.99.3 Description The issue allows remote attackers to modify internal read-only data structures, causing a denial of service or corrupting the internal state of the security manager, via a...

HP-UX PHNE_41907 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)

s700800 11.11 NTP timeservices upgrade plus utilities : A potential security vulnerability has been identified with HP-UX running XNTP. The vulnerability could be exploited remotely create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

PT-2011-1146

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.6 through 3.0.7 rsync version 3.x before 3.0.8 Description The issue allows remote rsync servers to cause a denial of service or possibly execute arbitrary code via malformed data when certain recursion, deletion, and...

CVE-2011-1295

WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service DOM tree corruption, conduct cross-site scripting XSS attacks, or possibly have unspecified other impact via...

CVE-2011-1291: Buffer Copy without Checking Size of Input

Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."...

PT-2011-3027

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.204 Description A use-after-free issue in the HTMLCollection implementation can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. The exact vector...

CVE-2011-0183: Undefined Security Weakness

Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service lockd, statd, mountd, or portmap outage via a crafted packet, related to an "integer truncation issue."...

PT-2011-2153

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and reboot, via Wi-Fi frames on the local wireless network. Recommendations For versions...

CVE-2009-5059

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

CVE-2011-0284

Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...

PT-2011-1241

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.6 Description The issue is related to an integer overflow in the SdnToJulian function within the Calendar extension in PHP. This allows context-dependent attackers to cause a denial of service, resulting in an...

PHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference

PHP 5.3.5 libzip 0.9.3 - zipnamelocate Null Pointer Dereference Source: http://securityreason.com/securityalert/8146 libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.:...

libzip 0.9.3 NULL Pointer Dereference

libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.: 18.03.2011 CVE: CVE-2011-0421 CERT: VU325039 Affected Software: - libzip 0.9.3 - PHP 5.3.5 fixed 5.3.6 Original URL:...

Fedora 15 : vsftpd-2.3.4-1.fc15 (2011-2567)

Bug 681667 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 14 : vsftpd-2.3.4-1.fc14 (2011-2590)

Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : vsftpd-2.3.4-1.fc13 (2011-2615)

Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern - Mon May 17 2010 Jiri Skala - 2.2.2-7 - when listenipv6=YES sets socket option to listen IPv6 only - Fri May 14 2010 Jiri Skala - 2.2.2-6 -...

CVE-2011-1191

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs...

CVE-2011-1200

Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...

PT-2011-3021

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue is related to the regular-expression functionality, which does not properly implement reentrancy. This allows remote attackers to cause a denial of service, potentially resulti...