CVE-2005-4650: Allocation of Resources Without Limits or Throttling

Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service resource consumption via a large number of Search Mambots...

GLSA-200512-02 : Webmin, Usermin: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200512-02 Webmin, Usermin: Format string vulnerability Jack Louis discovered that the Webmin and Usermin 'miniserv.pl' web server component is vulnerable to a Perl format string vulnerability. Login with the supplied username is...

cgi.rb

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...

CVE-2005-3145

httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...

CVE-2005-3145

httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...

CVE-2005-3145: Undefined Security Weakness

httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...

Linux kernel fget() DoS

sockfdput call is missed in routingioctl, leading to resource consumption and system crash...

CVE-2005-2815

The CVE-2005-2815 entry describes a vulnerability in FlatNuke 2.5.6 where print.php can disclose path information on error or be abused to trigger a denial‑of‑service by supplying an MS‑DOS device name (AUX/CON/PRN/COM1/LPT1) in the news parameter. Affected product: FlatNuke 2.5.6; vulnerability ...

Flatnuke 2.5.6 (possibly prior versions) Underlying system information disclosure / Administrative & users credentials disclosure

Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...

flatnuke256.txt

Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...

[SECURITY] [DSA 780-1] New kpdf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 780-1 [email protected] http://www.debian.org/security/ Martin Schulze August 22nd, 2005 http://www.debian.org/security/faq -...

CVE-2004-2415: Undefined Security Weakness

Davenport before 0.9.10 allows attackers to cause a denial of service resource consumption via 1 a very large XML file or 2 entity expansion attacks...

CVE-2005-2283: Undefined Security Weakness

WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service system and database resource consumption via a large file...

CVE-1999-1579

The Cenroll ActiveX control xenroll.dll for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service resource consumption by creating a large number of arbitrary files on the target machine...

[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...

CVE-2002-1625: Undefined Security Weakness

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service bandwidth, resource, and CPU consumption via the 1 loadMovie or 2 loadSound commands, which continue to execute until the browser is closed...

Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number

Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...

CVE-2004-2662

Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service resource consumption or crash via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources...

CVE-2004-0744

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service memory and resource consumption via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet...

GLSA-200411-21 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-21 Samba: Multiple vulnerabilities Samba fails to do proper bounds checking when handling TRANSACT2QFILEPATHINFO replies. Additionally an input validation flaw exists in msfnmatch.c when matching filenames that contain...