Important: Red Hat Security Advisory: httpd security update

Updated httpd packages that include a security fix for modssl and various enhancements are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An input filter bug in modssl was discovered in Apache httpd version 2.0.50 and earlier. A...

GLSA-200407-12 : Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling

The remote host is affected by the vulnerability described in GLSA-200407-12 Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling An attacker can utilize an erroneous data type in the IPTables TCP option handling code, which lies in an iterator. By making a TCP packet with a header...

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service

Microsoft Internet Explorer 6.0 Firefox 0.80.9.x - JavaScript Denial of Service source: https://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU...

CVE-2004-0744

CVE-2004-0744 is referenced in HP-UX advisories as a remote Denial of Service vulnerability in TCP/IP (Rose/fragment attack). The HP-UX impact concerns B.11.00, B.11.04, B.11.11, and B.11.23 running TCP/IP, with patchesPHNE_30161, PHNE_33427, PHKL_31500 (and related updates) required to mitigate....

Free Web Chat Initial Release - Connection Saturation Denial of Service

Free Web Chat Initial Release - Connection Saturation Denial of Service source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported...

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service // source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerabilit...

Free Web Chat Initial Release - Connection Saturation Denial of Service

source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username dat...

Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service

// source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username...

CVE-2004-0478

Unknown versions of Mozilla allow remote attackers to cause a denial of service high CPU/RAM consumption using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U...

resources consumption in DiGi WWW Server

Donato Ferrante Application: DiGi WWW Server http://wwwserver.sourceforge.net Version: Compieuw.1 Bug: resources consumption Date: 27-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

DiGi WWW Server 1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume large amounts of CPU resources. Sinc...

Resources consumption in Goahead webserver <= 2.1.8

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

goahead.txt

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Brilliant Digital Software Detection

Brilliant Digital, a media player that tracks browsing habits, is installed on the remote host. This program has been reported to cause excessive CPU and memory consumption and occasional crashes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11996;...

CVE-2003-1305

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

surfboard-1.1.8.txt

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: From the website: "Surfboard is a trivial web server, written by Meredydd Luff." ======= 2 Bugs ======= Directory traversal ------------------- The webserver checks the dot-dot pattern only if there is a '?' in...

Surfboard <= 1.1.8 vulns

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: = 1.1.8 Platforms: nix Bugs: possibility to view all the files in the system and resources consumption Risk: medium/high Exploitation: remote/easy Date: 01 Dec 2003 Author: Luigi Auriemma e-mail:...

CVE-2003-0187

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIGIPNFCONNTRACK enabled or the ipconntrack module loaded, allows remote attackers to cause a denial of service resource consumption due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to...

Apache vulnerable to DoS

Overview A remotely exploitable denial-of-service vulnerability exists in the Apache HTTP Server. Exploitation of this vulnerability may allow an attacker to consume all available system resources, resulting in a denial-of-service condition. Description The Apache HTTP Server is a very popular...

Edonkey and Overnet resources consumption

Applications: Edonkey2000 http://www.edonkey2000.com Overnet http://www.overnet.com Versions: 0.45 and previous versions only the GUI program Platforms: Windows only Bug: The programs spawn a new dialog for each chat message that arrives to them, and each dialog take system resources Risk:...