Design/Logic Flaw

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...

CVE-2010-4818

CVE-2010-4818 affects the X.Org X11 X server (GLX extension) on X.Org xserver 1.7.7. The vulnerability arises from issues in GLX handling that enable a remote, authenticated user to crash the server and potentially execute arbitrary code via crafted requests that trigger a client swap in glx/glxc...

Microsoft Remote Administration Protocol Denial of Service (MS12-054; CVE-2012-1850)

A denial of service vulnerability has been reported in the Microsoft Remote Administration Protocol RAP. The vulnerability is due to an error in the Windows networking components while handling specially crafted Remote Administration Protocol RAP responses. A remote attacker can exploit this issu...

Scientific Linux Security Update : mysql on SL5.x i386/x86_64

CVE-2008-2079 mysql: privilege escalation via DATA/INDEX DIRECTORY directives CVE-2008-3963 MySQL: Using an empty binary value leads to server crash CVE-2008-4456 mysql: mysql command line client XSS flaw CVE-2008-3963 MySQL: Using an empty binary value leads to server crash CVE-2009-2446 MySQL:...

httpdx <= 1.5.4 Wildcards Remote DoS Vulnerability

httpdx is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jasper:httpdx";...

Oxide Webserver 2.0.4 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc Overview: --------- Oxide Webserver v2.0.4 is prone to a remote Denial of Service vulnerability as it fails to handle crafted requests from the client properly. Technical Description: ---------------------- The vulnerability is caused by an error...

Oxide Webserver 2.0.4 Denial Of Service

Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 : http://secpod.org/advisories/SecPodOxideWebServerDoSVuln.txt Software : Oxide Webserver...

Oxide WebServer 2.0.4 - Denial of Service

Oxide WebServer 2.0.4 - Denial of Service Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 :...

mysql: Server crash on HANDLER READ NEXT after DELETE

MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service assertion failure and mysqld abort by deleting a record and using HANDLER READ NEXT...

Mandriva Linux Security Advisory : postgresql (MDVSA-2012:092)

Multiple vulnerabilities has been discovered and corrected in postgresql : Fix incorrect password transformation in contrib/pgcrypto's DES crypt function Solar Designer. If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much...

CVE-2012-2655

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service server crash by adding the 1 SECURITY DEFINER or 2 SET attributes to a procedural language's call handler...

Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2012-006)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. This issue could be exploited by sending an UPDATE over a SIP channel after the channel dialog has been...

Apache Traffic Server DoS

Server crash on oversized Host: header...

torrent-stats httpd.c Denial of Service

Exploit for linux platform in category dos / poc !/usr/bin/python import socket, urllib, sys host = 'localhost' port = 8080 s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, port s.settimeout8 print 'Sending GET request' size = sys.argv1 Crash at A 16378 size = 16379 DOS 1: gdb tra...

MySQL < 3.23.31 Buffer Overflow

The version of MySQL installed on the remote host allows a remote attacker to exploit a buffer overflow and crash the server, or even execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17817; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15...

OpenSSL < 0.9.8l Multiple Vulnerabilities

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.8l. As such, it may be affected by multiple vulnerabilities : - A remote attacker could crash the server by sending malformed ASN.1 data. This flaw only affects some architectures, Win64 and other...

Ubuntu: Security Advisory (USN-1307-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for php5 USN-1307-1

Ubuntu Update for Linux kernel vulnerabilities USN-1307-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13071.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for php5 USN-1307-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Web Servers UDP Flooding Denial of Service (CVE-2011-2013)

A denial of service vulnerability has been reported in all web servers. The vulnerability is due to the server's inability to handle multiple incoming UDP requests within a short period of time. Remote attackers may exploit this issue by rapidly sending a large number of UDP requests to the serve...

[USN-1266-1] OpenLDAP vulnerability

========================================================================== Ubuntu Security Notice USN-1266-1 November 17, 2011 openldap vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...