CVE-2007-2772

CA BrightStor ARCserve Backup 11.5.2.0 SP2 is affected: caloggerd.exe (camt70.dll) and mediasvr.exe (catirpc.dll, rwxdr.dll) can be remotely triggered to crash via crafted RPC packets, due to a NULL dereference stemming from insufficient data validation in RPC request parsing. The CA advisory CPA...

CVE-2007-2722: Undefined Security Weakness

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service application instability via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence...

CVE-2007-2726: Undefined Security Weakness

BitsCast 0.13.0 allows remote attackers to cause a denial of service application crash via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns...

CVE-2007-1669

CVE-2007-1669 describes a DoS in zoo-2.10-based ZOO archive parsing: a direntry that points to a previously processed file can trigger an infinite loop, causing 100% CPU or service unavailability. Affected products include Barracuda Spam Firewall (firmware 3.4+ with virusdef before 2.0.6399, and ...

CVE-2007-1673: Undefined Security Weakness

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

MSN Passport accounts remote DoS code

No description provided by source. !/usr/bin/perl by: Simo aka 6mOHaCk 1 december 2005 MorX security research team www.morx.org Details: it seems that msn passport users using services such hotmail email and msn messenger and more ...

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service / source: https://www.securityfocus.com/bid/23823/info The Zoo compression algorithm is prone to a remote denial-of-service vulnerability. This issue arises when applications implementing the Zoo algorithm process certain malformed...

CVE-2007-2502: Undefined Security Weakness

Unspecified vulnerability in HP ProCurve 9300m Series switches with software 08.0.01c through 08.0.01j allows remote attackers to cause a denial of service via unknown vectors, a different switch series than CVE-2006-4015...

real-dos.txt

!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...

CVE-2007-2415: Undefined Security Weakness

Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service application exit via a long URI. NOTE: this issue was originally reported as a crash, but the vendor states that the impact is a "clean" exit in which "the server I/O loop finishes and the process exits normally."...

CVE-2007-2367: Undefined Security Weakness

Buffer overflow in wserveconsole.exe in Wserve HTTP Server whttp 4.6 allows remote attackers to cause a denial of service forced application exit via a long directory name in the URI...

FreeBSD : mod_perl -- remote DoS in PATH_INFO parsing (ef2ffb03-f2b0-11db-ad25-0010b5a0a860)

Mandriva reports : PerlRun.pm in Apache modperl 1.29 and earlier, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI. %NASLMINLEVEL 70300 C...

CVE-2007-2276: Undefined Security Weakness

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

CVE-2007-2186: Undefined Security Weakness

Foxit Reader 2.0 allows remote attackers to cause a denial of service application crash via a crafted PDF document...

Opera 9.2 - .torrent Remote Denial of Service

Opera 9.2 - .torrent Remote Denial of Service / Created Date :April 23 2007 Credits go to n00b for finding this vulnerability and writing p0c. Moderator of http://igniteds.net 0pera 9.2 torrent file remote dos exploit. opera has its own bit torrent client with-in the web browser it is possible to...

amsn_dos.txt

/ bug: amsn remote DoS vulnerability affected version: = 0.96 site: http://amsn-project.net/ tested: amsn-0.96 on freebsd 6.2 author: levent kayan date: Tue Mar 27 16:04:51 CEST 2007 www.corehack.org / / Introduction / amsn is a free open source MSN Messenger clone. / Technical details / During...

FreeBSD : lighttpd -- Remote DOS in CRLF parsing (d2b48d30-ea97-11db-a802-000fea2763ce)

Lighttpd SA : If the connection aborts during parsing '\r\n\r\n' the server might get into a infinite loop and use 100% of the CPU time. lighttpd still responses to other requests. This can be repeated until either the server limit for concurrent connections or file descriptors is reached. The bu...

CVE-2007-1869: Undefined Security Weakness

lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service cpu and resource consumption by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption...

Looked at the foreign cattle people how to tap Microsoft vulnerability-vulnerability warning-the black bar safety net

Ghost boy note: contains a w3wp-dos. c and a PDF document. I also added a download mirror to prevent the official link failure. Information source: 混世魔王 blog w3wp remote DoS due to improper reference of STA COM components in ASP.NET asp.net COM DOS EXP research Cattle below download address. And...

MySQL Single Row Subselect Remote DoS

According to its banner, the version of MySQL on the remote host is older than 5.0.37. Such versions are vulnerable to a remote denial of service when processing certain single row subselect queries. A malicious user can crash the service via a specially crafted SQL query. C Tenable Network...