FreeBSD-SA-11:02.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:02.bind Security Advisory The FreeBSD Project Topic: BIND remote DoS with large RRSIG RRsets and negative caching Category: contrib Module: bind Announced:...

Remote DoS Flaw in BIND Fixed in New Version !

The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...

Remote DoS Flaw in BIND Fixed in New Version

The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...

CVE-2011-1208

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 aka 6.3.49, and 6.5.x before 6.5 FP4 aka 6.5.0.4 does not properly handle the 1 rpctestsvcreadwrite and 2 rpctestsvcdone commands, which allows remote attackers to cause a denial of service NULL pointer...

Design/Logic Flaw

lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service daemon crash via an Active Directory login...

HP Data Protector Manager RDS DOS

This module causes a remote DOS on HP Data Protector's RDS service. By sending a malformed packet to port 1530, rm32.dll causes RDS to crash due to an enormous size for malloc. This module requires Metasploit: https://metasploit.com/download Current source:...

HP-UX PHNE_41907 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)

s700800 11.11 NTP timeservices upgrade plus utilities : A potential security vulnerability has been identified with HP-UX running XNTP. The vulnerability could be exploited remotely create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

CVE-2009-5059

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

PHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference

PHP 5.3.5 libzip 0.9.3 - zipnamelocate Null Pointer Dereference Source: http://securityreason.com/securityalert/8146 libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.:...

libzip 0.9.3 NULL Pointer Dereference

libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.: 18.03.2011 CVE: CVE-2011-0421 CERT: VU325039 Affected Software: - libzip 0.9.3 - PHP 5.3.5 fixed 5.3.6 Original URL:...

Fedora 15 : vsftpd-2.3.4-1.fc15 (2011-2567)

Bug 681667 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 13 : vsftpd-2.3.4-1.fc13 (2011-2615)

Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern - Mon May 17 2010 Jiri Skala - 2.2.2-7 - when listenipv6=YES sets socket option to listen IPv6 only - Fri May 14 2010 Jiri Skala - 2.2.2-6 -...

Fedora 14 : vsftpd-2.3.4-1.fc14 (2011-2590)

Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

RHEL 4 / 5 / 6 : vsftpd (RHSA-2011:0337)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0337 advisory. - vsftpd: remote DoS via crafted glob pattern CVE-2011-0762 Note that Nessus has not tested for this issue but has instead relied only on the...

vsftpd security update

2.2.2-6.el60.1 - Resolves: 681891 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern...

PHP Exif Extension 'exif_read_data()' Function Remote DoS

No description provided by source. ===================================================================== PHP Exif 64bit Casting Vulnerability ===================================================================== Affected Software : PHP = 5.3.5 Exif extension for 64bit platforms Severity : Low...

Apache Httpd < 2.0.65 : apr_fnmatch flaw leads to mod_autoindex remote DoS

A flaw was found in the aprfnmatch function of the bundled APR library. Where modautoindex is enabled, and a directory indexed by modautoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could b...

CVE-2011-0445

Wireshark CVE-2011-0445 affects the ASN.1 BER dissector in Wireshark 1.4.0–1.4.2, where crafted packets can trigger an assertion failure and cause DoS. Connected sources corroborate DoS impact via crafted packets in the dissector, with an exposed vulnerability in historical Wireshark versions. Mi...

HP Data Protector Manager v6.11 Remote DoS in RDS Service

Exploit for windows platform in category dos / poc !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...

Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC

Exploit for windows platform in category dos / poc import socket, sys print "\n" print "----------------------------------------------------------------" print "| Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC |" print "| Matthew Bergin, Bergin Penetration Testing |" print "| Win7 Ultimate v6.1...