CVE-2007-5501: Undefined Security Weakness

The tcpsacktagwritequeue function in net/ipv4/tcpinput.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service crash via crafted ACK responses that trigger a NULL pointer dereference...

CVE-2007-5896: Undefined Security Weakness

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

[UPH-07-02] Firefly Media Server DoS

UPH-07-02 UnprotectedHex.com security advisory 07-02 Discovered by nnp Discovered : 1 August 2007 Reported to the vendor : 13 October 2007 Fixed by vendor : 21 October 2007 Vulnerability class : Remote DoS Affected product : mt-dappd/Firefly Media Server Version : = 0.2.4 Product details:...

[UPH-07-01] Firefly Media Server DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPH-07-01 UnprotectedHex.com security advisory 07-01 Discovered by nnp Discovered : 1 August 2007 Reported to the vendor : 13 October 2007 Fixed by vendor : 21 October 2007 Vulnerability class : Remote DoS Affected product : mt-dappd/Firefly Media...

CVE-2007-5788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

CVE-2002-2370: Undefined Security Weakness

SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service crash via a URL request that does not end with a newline...

CVE-2002-2379: Undefined Security Weakness

Cisco AS5350 IOS 12.211T with access control lists ACLs applied and possibly with ssh running allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor...

CVE-2007-5622: Undefined Security Weakness

Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service daemon crash via multiple OPEN commands to the FTP proxy...

CVE-2002-2357: Improper Restriction of Operations within the Bounds of a Memory Buffer

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service crash via a long USER string, possibly due to a buffer overflow...

CVE-2002-2337: Undefined Security Weakness

Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2003-1497: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long LogPageNum variable...

CVE-2003-1462: Undefined Security Weakness

modsurvey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service disk consumption and possible crash...

CVE-2003-1450: Improper Input Validation

BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service segmentation fault via a malformed RPLNAMREPLY numeric 353 message...

CVE-2007-5339: Improper Input Validation

Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service crash via crafted HTML that triggers memory corruption or assert errors...

CVE-2003-1421: Undefined Security Weakness

Unspecified vulnerability in modmysqllogger shared object in SuckBot 0.006 allows remote attackers to cause a denial of service seg fault via unknown attack vectors...

CVE-2007-5591: Undefined Security Weakness

The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service telephony application outage...

CVE-2007-5570: Improper Input Validation

Cisco Firewall Services Module FWSM 3.21, and 3.15 and earlier, allows remote attackers to cause a denial of service device reload via a crafted HTTPS request, aka CSCsi77844...

CVE-2007-5568: Improper Input Validation

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...

CVE-2007-5556: Improper Input Validation

Unspecified vulnerability in the Avaya VoIP Handset allows remote attackers to cause a denial of service reboot via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2003-1364: Improper Input Validation

Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service crash via an HTTP GET message with empty 1 Connection or 2 Range fields...