Asterisk IAX2 (IAX) POKE Request Saturation Resource Exhaustion Remote DoS

The version of Asterisk running on the remote host consumes an IAX2 call number while waiting for an ACK packet in response to a PONG packet. By flooding the affected service with POKE requests, an unauthenticated, remote attacker can leverage this issue to exhaust all available call numbers and...

CVE-2008-3290: Undefined Security Weakness

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3286: Improper Input Validation

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3215

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713...

CVE-2008-3214: Improper Input Validation

dnsmasq 2.25 allows remote attackers to cause a denial of service daemon crash by 1 renewing a nonexistent lease or 2 sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon...

ymsg81-dos.txt

Yahoo Messenger 8.1 latest Remote DoS Safe for Scripting, Safe for Initialize arg1=String517140, "A" target.c arg1...

Yahoo Messenger 8.1 ActiveX Remote Denial of Service Exploit

No description provided by source. Yahoo Messenger 8.1 latest Remote DoS Safe for Scripting, Safe for Initialize htmlbody object id=target classid=clsid:02478D38-C3F9-4EFB-9B51-7695ECA05670/object script language=vbscript arg1=String517140, "A" target.c arg1 /script /body/html...

Yahoo Messenger 8.1 - ActiveX Remote Denial of Service

Yahoo Messenger 8.1 - ActiveX Remote Denial of Service Yahoo Messenger 8.1 latest Remote DoS Safe for Scripting, Safe for Initialize arg1=String517140, "A" target.c arg1 milw0rm.com 2008-07-14...

Yahoo Messenger 8.1 - ActiveX Remote Denial of Service

Yahoo Messenger 8.1 latest Remote DoS Safe for Scripting, Safe for Initialize arg1=String517140, "A" target.c arg1 milw0rm.com 2008-07-14...

reSIProcate 1.3.2 Remote Denial of Service PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any produ...

reSIProcate 1.3.2 Remote Denial of Service PoC

Exploit for multiple platform in category dos / poc ============================================== reSIProcate 1.3.2 Remote Denial of Service PoC ============================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008...

reSIProcate 1.3.2 - Remote Denial of Service (PoC)

reSIProcate 1.3.2 - Remote Denial of Service PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2...

CVE-2008-3135: Undefined Security Weakness

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

CVE-2008-3105: Undefined Security Weakness

Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application...

Linux Kernel 2.6.x Firewall Logging Rules Remote DoS Exploit

No description provided by source. / iptables.log.integer.underflow.POC.c CAN-2004-0816, BID11488, SUSE-SA:2004:037 felixzhou at hotmail dot com / include stdio.h include winsock2.h include ws2tcpip.h include time.h pragma commentlib,"ws232" static unsigned char dip4; static unsigned int da; stat...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952: Undefined Security Weakness

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2704: Improper Input Validation

Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...

Fedora 7 : net-snmp-5.4-18.fc7 (2008-5224)

Tue Jun 10 2008 Jan Safranek 5.4-18 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4-17 - fixing ipNetToMediaNetAddress to show IP address 432780 - Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP...

CVE-2008-1440: Improper Validation of Specified Quantity in Input

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...