PT-2018-4405

Name of the Vulnerable Software and Affected Versions Atlassian Floodlight Controller versions prior to 1.2 Description A race condition in the LoadBalancer module allows remote attackers to cause a denial of service via a state manipulation attack, resulting in a NULL pointer dereference and...

IBM WebSphere MQ Denial of Service Vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM WebSphere MQ versions 7.5, 8.0, and 9.0. A local attacker could exploi...

Medium: cyrus-sasl

Issue Overview: Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service thread crash and consumption via 1 an invalid salt o...

CVE-2013-4122

Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service thread crash and consumption via 1 an invalid salt or, when FIPS-140...

CVE-2013-4122

CVE-2013-4122 affects Cyrus SASL 2.1.23, 2.1.26 and earlier. The root cause is incorrect handling of when a NULL value is returned on error by the crypt function in glibc 2.17+, enabling remote DoS via (1) invalid salt or (2) DES or (3) MD5 passwords when FIPS-140 is enabled, triggering a NULL po...

CVE-2013-3724

The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...

CVE-2013-3724

The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...

PT-2013-4581

Name of the Vulnerable Software and Affected Versions Monkey version 1.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a thread crash and service outage. This is achieved by including a '0' character in an HTTP request, which is processed by the mk...

CVE-2013-3724: Improper Input Validation

The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...

CVE-2000-0825

Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash...

CVE-2000-0825

Ipswitch Imail 6.0 is affected by a denial-of-service vulnerability where a large number of concurrent connections with a long Host header can cause a thread to crash. This CVE (CVE-2000-0825) is described in multiple sources (NVD, CVE List) as enabling remote attacks that disrupt service, but th...

CVE-2000-0825: Undefined Security Weakness

Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash...