Ubuntu 8.04 LTS / 8.10 / 9.04 : apr-util vulnerabilities (USN-786-1)

Matthew Palmer discovered an underflow flaw in apr-util. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. Applications using libapreq2 are also affected. CVE-2009-0023 It was discovered tha...

USN-786-1: apr-util vulnerabilities

Matthew Palmer discovered an underflow flaw in apr-util. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. Applications using libapreq2 are also affected. CVE-2009-0023 It was discovered tha...

DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Internet Explorer, Google Chrome и Opera. Недавно была опубликована DoS уязвимость в Mozilla Firefox найденная Thierry Zoller. Проверив её в других браузерах, я выявил, что данная Denial of Service...

Miniweb Source Disclosure

Miniweb webserver Source Disclousure Vulnerabilities By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P : In t3h wild... Site: http://miniweb.sourceforge.net/ Info: MiniWeb is a mini HTTP server implementation written in C language, featuring low system resour...

Mandriva Update for libwmf MDKSA-2007:123 (libwmf)

Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:123 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for apache-mod_perl MDKSA-2007:083 (apache-mod_perl)

Check for the Version of apache-modperl OpenVAS Vulnerability Test Mandriva Update for apache-modperl MDKSA-2007:083 apache-modperl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for clamav MDKSA-2007:115 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:115 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2009-1101

Technical details for CVE-2009-1101 are not provided in the connected documents. Monitor for updates; no concrete root-cause, affected products, or fixes are specified here.

Ubuntu Update for libxml2 vulnerability USN-569-1

Ubuntu Update for Linux kernel vulnerabilities USN-569-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5691.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxml2 vulnerability USN-569-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Mozilla Firefox, Internet Explorer, Opera та Google Chrome. Данную атаку я назвал DoS через ифреймы DoS via iframes attack. И она относится к типу DoS http://websecurity.com.ua/2550/ через потребление...

CVE-2008-5428

Opera 9.51 on Windows XP does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption via...

Design/Logic Flaw

Incredimail build 5853710 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

Design/Logic Flaw

Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or...

CVE-2008-5429

Incredimail build 5853710 is affected by a denial-of-service issue triggered by large MIME-structured emails, including (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers. The underlying risk is resource consumption (stack/CPU/memory). The description n...

CVE-2008-5426

Kaspersky Internet Security Suite 2009 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource...

CVE-2008-5348

CVE-2008-5348 concerns an unspecified vulnerability in Sun JDK/JRE across multiple major versions (JDK/JRE 6 Update 10 and earlier; 5.0 Update 16 and earlier; 1.4.2_18 and earlier) that, when Kerberos authentication is used, can allow remote attackers to cause a denial of service through OS resou...

GeSHi 1.0.x - XML Parsing Remote Denial of Service

GeSHi 1.0.x - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources...

Code injection

PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service resource consumption or application halt via certain 1 raise or 2 import statements...

DoS vulnerability in Mozilla Firefox

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в браузере Mozilla Firefox. DoS: Данная DoS является объединением разных видов DoS уязвимостей в браузерах: зависанием, поглощением ресурсов и выбиванием. Эксплоит:...

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...