4151 matches found
Debian DSA-662-2 : squirrelmail - several vulnerabilities
Andrew Archibald discovered that the last update to squirrelmail which was intended to fix several problems caused a regression which got exposed when the user hits a session timeout. For completeness below is the original advisory text : Several vulnerabilities have been discovered in...
Eternal Lines Web Server DoS
Concurrent connections number is limited and timeout is not implemented...
DSA-662-1 squirrelmail - several
Bulletin has no description...
[SA13819] OpenBSD TCP Retransmission Timeout Calculation Denial of Service
TITLE: OpenBSD TCP Retransmission Timeout Calculation Denial of Service SECUNIA ADVISORY ID: SA13819 VERIFY ADVISORY: http://secunia.com/advisories/13819/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: OpenBSD 3.x http://secunia.com/product/100/ DESCRIPTION: A...
CVE-2004-1112
The buffer overflow trigger in Cisco Security Agent CSA before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute...
CVE-2004-2534
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service connection consumption by sending a large number HTTP HEAD requests...
CVE-2004-1112
The buffer overflow trigger in Cisco Security Agent CSA before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute...
[SA13268] Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service
TITLE: Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service SECUNIA ADVISORY ID: SA13268 VERIFY ADVISORY: http://secunia.com/advisories/13268/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Fastream NETFile FTP/Web Server 6.x http://secunia.com/product/2455/...
Sacred DoS
Server doesn't have connection timeout and doesn't support more than 17 connections...
CVE-2002-0674: Undefined Security Weakness
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication...
Critical: Red Hat Security Advisory: krb5 security update
Updated krb5 packages that improve client responsiveness and fix several security issues are now available for Red Hat Enterprise Linux 3. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. Several double-free bug...
Painkiller 1.3.1 - Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 3455 define TIMEOUT 3 define GAMEVER "1.3" define INFO "xfexfdx00xDExADxC0xDExffxffxff"...
CVE-2003-0637
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing...
vpop3d Denial Of Service.
Hi, Topic: vpop3d Denial Of service Product: vpop3d Note: This is implemented in several vhost packages, I can't name all of them, but vhost-3.05r3 is one. Vendor Notification: Notified several Vendors about the binary vpop3d that they are using in their packages, Original Author of vpop3d has be...
CVE-2003-0637
Novell iChain 2.2 before Support Pack 1 is affected. The issue arises because the authentication timeout for non-existent users is shorter than for valid users, enabling remote attackers to enumerate usernames and perform brute-force password guessing. The root cause is the uneven timeout handlin...
ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow
ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow source: https://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for...
ipfilter denial of service problem
Below is an ipfilter security issue, and my previous mail to author Darren was bounced back, so I think maybe I should mail it to this mailing list. Overview -- Anytime ipfilter see a packet with ACK bit set without the previous SYN, it will marked it as TCPSESTABLISHED in it's state table, and f...
CVE-2002-2243
Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service refused connections by opening a connection and not closing it...
CVE-2002-1265
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...