CVE-2002-0400: Undefined Security Weakness

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service shutdown via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL, aka DoSfindtype...

CVE-2002-1221: Undefined Security Weakness

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service crash via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference...

CVE-2002-0651: Undefined Security Weakness

Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers...

CVE-2002-1320: Undefined Security Weakness

Pine 4.44 and earlier allows remote attackers to cause a denial of service core dump and failed restart via an email message with a From header that contains a large number of quotation marks "...

CVE-2002-0729: Undefined Security Weakness

Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator...

CVE-2002-1169: Undefined Security Weakness

IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service crash via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash...

CVE-2002-1104: Undefined Security Weakness

Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...

CVE-2002-1547: Undefined Security Weakness

Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell SCS management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144...

CVE-2004-0724: Undefined Security Weakness

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0634: Undefined Security Weakness

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service process crash via a handle without a policy name, which causes a null dereference...

CVE-2004-0633: Undefined Security Weakness

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

CVE-2004-0468: Undefined Security Weakness

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service memory exhaustion and device reboot via certain IPv6 packets...

CVE-2004-0604: Undefined Security Weakness

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

CVE-2004-0202: Undefined Security Weakness

IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...

Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)

The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...

CVE-2004-0525: Undefined Security Weakness

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

CVE-2004-0504: Undefined Security Weakness

Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...

CVE-2004-0392: Undefined Security Weakness

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0367: Undefined Security Weakness

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

CVE-2004-0252: Undefined Security Weakness

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...