4417 matches found
[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
Debian DSA-763-1 : zlib - remote DoS
Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 ...
CVE-2004-2273: Undefined Security Weakness
efFingerD 0.2.12 allows remote attackers to cause a denial of service daemon crash via a packet with a single byte, which triggers a "Wrong protocol or connection state" error...
CVE-2004-2272: Undefined Security Weakness
Buffer overflow in the sockFingerDataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of service daemon crash via a long finger command...
CVE-2005-2309: Uncontrolled Resource Consumption
Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...
CVE-2002-2080: Undefined Security Weakness
Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...
CVE-2002-1989: Undefined Security Weakness
Resin 2.1.1 allows remote attackers to cause a denial of service thread and connection consumption via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp...
CVE-2002-1988: Undefined Security Weakness
Resin 2.1.1 allows remote attackers to cause a denial of service memory consumption and hang via a URL with long variables for non-existent resources...
CVE-2001-1533: Undefined Security Weakness
Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...
CVE-2001-1552: Undefined Security Weakness
ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...
CVE-2002-2025: Undefined Security Weakness
Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for 1 an MS-DOS device name and 2 an MS-DOS device name with a large number of characters appended to the device name...
FreeBSD : gaim -- MSN Remote DoS vulnerability (b6612eee-df5f-11d9-b875-0001020eed82)
The GAIM team reports : Remote attackers can cause a denial of service crash via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
FreeBSD : gaim -- remote DoS on receiving malformed HTML (142353df-b5cc-11d9-a788-0001020eed82)
The GAIM team reports : Receiving malformed HTML can result in an invalid memory access causing Gaim to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
FreeBSD : gaim -- remote DoS on receiving malformed HTML (3fa2b372-a9f5-11d9-a788-0001020eed82)
The GAIM team reports : The gaimmarkupstriphtml function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a string that contains malformed HTML, which causes an out-of-bounds read. %NASLMINLEVEL 70300 C Tenable Network...
FreeBSD : net-snmp -- remote DoS vulnerability (b2a1a3b5-ed95-11d9-8310-0001020eed82)
A Net-SNMP release announcement reports : A security vulnerability has been found in Net-SNMP releases that could allow a denial of service attack against Net-SNMP agent's which have opened a stream based protocol EG, TCP but not UDP; it should be noted that Net-SNMP does not by default open a TC...
FreeBSD : gaim -- remote DoS on receiving certain messages over IRC (ec09baa3-a9f5-11d9-a788-0001020eed82)
The GAIM team reports : The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via...
CVE-2005-2242: Undefined Security Weakness
Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to cause a denial of service memory consumption and restart via crafted packets to 1 the CTI Manager ctimgr.exe or 2 the CallManager ccm.exe...
CVE-2005-2239: Undefined Security Weakness
oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null \0 characters...
CVE-2005-2170: Undefined Security Weakness
The LCF component lcfd in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service process exit and connection loss by connecting to LCF and ending the connection without sending any data...