CVE-2002-1104: Undefined Security Weakness

Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...

CVE-2002-1547: Undefined Security Weakness

Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell SCS management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144...

CVE-2004-0724: Undefined Security Weakness

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0634: Undefined Security Weakness

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service process crash via a handle without a policy name, which causes a null dereference...

CVE-2004-0633: Undefined Security Weakness

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

CVE-2004-0468: Undefined Security Weakness

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service memory exhaustion and device reboot via certain IPv6 packets...

CVE-2004-0604: Undefined Security Weakness

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

CVE-2004-0202: Undefined Security Weakness

IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...

Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)

The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...

CVE-2004-0525: Undefined Security Weakness

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

CVE-2004-0504: Undefined Security Weakness

Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...

CVE-2004-0392: Undefined Security Weakness

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0367: Undefined Security Weakness

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

CVE-2004-0252: Undefined Security Weakness

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

CVE-2004-0255: Undefined Security Weakness

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0278: Undefined Security Weakness

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

CVE-2003-1032: Undefined Security Weakness

Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service crash via a malformed URL to the web server, possibly involving a buffer overflow...

CVE-2004-0060: Undefined Security Weakness

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2003-1013: NULL Pointer Dereference

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...

Remote DoS in FreeRADIUS, all versions.

Application: FreeRADIUS, all versions http://www.freeradius.org Summary: A remote DoS, and possibly exploit, exists in all versions of the FreeRADIUS server. All users should upgrade to the latest version, as soon as it is officially release. For later announcements, see: http://www.freeradius.or...