Important: mysql security update

4.1.20-2.RHEL4.1.0.1 - Fix CVE-2007-3780: remote DOS via bad password length byte Resolves: 257621 - Workaround for new gcc bug on ia64: it locks up while compiling sqltable.cc...

blizzard-dos.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...

[HISPASEC] Blizzard StarCraft Brood War 1.15.1 Remote DoS

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...

CVE-2007-3741: Undefined Security Weakness

The 1 psp aka .tub, 2 bmp, 3 pcx, and 4 psd plugins in gimp allow user-assisted remote attackers to cause a denial of service crash or memory consumption via crafted image files, as discovered using the fusil fuzzing tool...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the VIA Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH8 Synopsis After sending a message where the a space is replaced by a slash after the SIP version in the VIA, the device looks functional but in fact...

CVE-2007-4532: Undefined Security Weakness

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...

CVE-2007-3847

CVE-2007-3847 affects Apache httpd 2.3.x (mod_proxy) where the date handling in modules/proxy/proxy_util.c under a threaded MPM can be triggered by crafted date headers, causing a buffer over-read and remote denial of service (caching forward proxy process crash). The linked advisories indicate t...

ClamAV < 0.91.2 Multiple Remote DoS (deprecated)

Binary data 4183.prm...

CVE-2007-4452: Undefined Security Weakness

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service disconnection via a long 1 emote or 2 SPEC command...

[Full-disclosure] 10 messages SIP Remote DOS on Cisco 7940 SIP Phone

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 4 April, 2007 ID: KIPH6 Synopsis After sending a series of ten SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in April 2007 and...

cisco-stateful-dos.txt

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 4 April, 2007 ID: KIPH6 Synopsis After sending a series of ten SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in April 2007 and...

CVE-2007-4213: Undefined Security Weakness

Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service device reset or hang via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293...

CVE-2007-4404: Undefined Security Weakness

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

CVE-2007-4392: Undefined Security Weakness

Winamp 5.35 allows remote attackers to cause a denial of service program stack overflow and application crash via an M3U file that recursively includes itself...

ecs-dos.txt

?php ---------------------------------------------------- --------Easy Chat Server Remote DoS Exploit--------- ---------------------------------------------------- -http://www.echatserver.com/------------------------ ---------------------------------------------------- -Tested on version 2.2 last...

WinGate < 6.2.2 Invalid SMTP State Remote DoS

Binary data 4166.prm...

CVE-2007-4293: Undefined Security Weakness

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service device crash via 1 "abnormal" MGCP messages, aka CSCsd81407; and 2 a large facsimile packet, aka CSCej20505...

CVE-2007-4285: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.315 and 12.314T, allows remote attackers to obtain sensitive information partial packet contents or cause a denial of service router or component crash via crafted IPv6 packets with a Type 0...

CVE-2007-2927: Undefined Security Weakness

Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame...

[security bulletin] HPSBUX02248 SSRT071437 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service &#40;DoS&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01087206 Version: 1 HPSBUX02248 SSRT071437 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as...