CVE-2002-1568: Undefined Security Weakness

OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service crash via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENTMASTERKEY messages,...

savant31.txt

Release Date: 09/22/2003 TITLE ===== Savant Web Server - Remote DoS DESCRIPTION =========== "Savant is a full-featured open source / freeware web server designed to be run under any 32-bit version of Microsoft Windows including Windows 95, 98, ME, XP, NT, and 2000. Savant was designed to be easy ...

CVE-2003-0827: Undefined Security Weakness

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service crash via a long packet to UDP port 523...

CVE-2003-0760: Undefined Security Weakness

Blubster 2.5 allows remote attackers to cause a denial of service crash via a flood of connections to UDP port 701...

CVE-2003-0176: Undefined Security Weakness

The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...

CVE-2003-0562: Undefined Security Weakness

Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service ABEND via a long input string...

CVE-2003-0554: Undefined Security Weakness

NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service connection and possibly memory exhaustion via a flood of ConnectToMe requests containing arbitrary IP addresses and ports...

CVE-2003-0520: Undefined Security Weakness

Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service crash via a TypingUser message in which the "TypingUser" string has been modified...

Remote DoS on Canon GP300

Affected: Canon GP300 using WebSpooler v4.5.062 fr, other versions ? Risk: High Remote: Yes Description: A simple http request can crash the whole print server. Request is "GET /" on tcp/80 After sending "GET /" a reboot is needed to print again or to take hand on the print server. The web server...

wzdftpd remote DoS

Title: wzdftpd remote DoS Affected: wzdftpd = 0.1rc4 URL: http://www.wzdftpd.net Risk: High Exploitable: Yes Remote: Yes Date: June, 27 2003 Overview: "A portable, modular and efficient ftp server, supporting SSL, winsock, multithreaded, modules ,externals scripts. unix-like permissions+acls,...

CVE-2003-0477: Undefined Security Weakness

wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service crash via a PORT command without an argument...

CVE-2003-0419: Undefined Security Weakness

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface...

Remote DoS in Desktop Orbiter

SUMMARY: Desktop Orbiter www.anfibia.it is a client-server application that allow you to administer and secure your network. VULNERABILITY DESCRIPTION: At every connection to port 51054of the server, a snapshot preview of the desktop is loaded in memory; by creating many connections to this port ...

CVE-2003-0305: Undefined Security Weakness

The Service Assurance Agent SAA in Cisco IOS 12.0 through 12.2, aka Response Time Reporter RTR, allows remote attackers to cause a denial of service crash via malformed RTR packets to port 1967...

CVE-2003-0293: Undefined Security Weakness

PalmOS allows remote attackers to cause a denial of service CPU consumption via a flood of ICMP echo request ping packets...

CVE-2003-0206: Undefined Security Weakness

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service crash via 1 link or 2 title elements that contain multiple lines...

CVE-2002-0856

The CVE-2002-0856 entry concerns the SQL*NET listener in Oracle Net for Oracle9i (versions 9.0.x and 9.2). The vulnerability is a denial-of-service caused by handling of certain debug requests in the debugging feature, which are not processed correctly, allowing remote attackers to crash the serv...

CVE-2002-1035: Undefined Security Weakness

Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service crash via an HTTP request with a long, malformed HTTP 1version number...

CVE-2001-1251: Undefined Security Weakness

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests...

CVE-2002-0935: Undefined Security Weakness

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service resource exhaustion via a large number of requests to the server with null characters, which causes the working threads to hang...