MDKA-2007:077 : console-tools

vt-is-UTF8 utility included in console-tools package, and used by Mandriva initscripts, can hang, causing random problems like preventing a local/remote system reboot, unless user take interactive action 27948. Also, when executed on a terminal different from a linux vt, it can cause errors and...

Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities

Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/23926/info OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the...

Progress WebSpeed 3.03.1 - Denial of Service

Progress WebSpeed 3.03.1 - Denial of Service //source: https://www.securityfocus.com/bid/23778/info // //WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. // //Successful exploits can allow attackers to cause the application to becom...

PulseAudio 0.9.5 - Assert() Remote Denial of Service

PulseAudio 0.9.5 - Assert Remote Denial of Service source: https://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to...

HYSA-2006-008.txt

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...

HiveMail-1.3.txt

GulfTech Security Research February 10, 2006 Vendor : HiveMail URL : http://www.hivemail.com/ Version : HiveMail queryfirst" SELECT contacts FROM hivecontactgroup WHERE contactgroupid = $contactgroupid AND userid = $hiveuseruserid ";...

High Risk Vulnerability in Lexmark Printer Sharing Service

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in the Lexmark Printer Sharing service which could allow a remote, unauthenticated attacker to execute arbitrary code on a Lexmark printer user's computer system with Local System privileges. There is no known official pat...

Ubuntu 4.10 : gaim vulnerabilities (USN-85-1)

The Gaim developers discovered that the HTML parser did not sufficiently validate its input. This allowed a remote attacker to crash the Gaim client by sending certain malformed HTML messages. CAN-2005-0208, CAN-2005-0473 Another lack of sufficient input validation was found in the 'Oscar' protoc...

Nokia smartphones Nobex service DoS

Server stops responding after receiving archive with special characters in the filename...

[SA16757] Sun Java System Web Proxy Server Denial of Service Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...

Potential Remote Denial of Service

Summary: A remote attacker could cause and smbd process to consume abnormal amounts of system resources due to an input validation error when matching filenames containing wildcard characters. Patch Availability A patch for Samba 3.0.7 samba-3.0.7-CAN-2004-0930.patch is available from...

[Full-Disclosure] Turbo Traffic Trader Nitro v1.0 SQL Injection & XSS Proofs of Concept

+-----------------------------------------------------------------------+ | Turbo Traffic Trader Nitro v1.0 SQL Injection & XSS Proofs of Concept | | By aCiDBiTS [email protected] 10-Oct-2004 | +-----------------------------------------------------------------------+ Your web application needs a...

Debian DSA-318-1 : lyskom-server - denial of service

Calle Dybedahl discovered a bug in lyskom-server which could result in a denial of service where an unauthenticated user could cause the server to become unresponsive as it processes a large query. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Engenio/LSI Logic controllers denial of service/data corruption

Product : Engenio/LSI Logic storage controllers, including: - Storagetek D280 verified, - IBM FastT 100 verified, - Probably all other Storagetek and IBM FastT storage controllers since the software part is almost identical, - Maybe some SGI and Teradata storage controllers unverified, - Some...

phpkit suffers (reale stupid) XSS vuln.

Software: phpkit Version: 1.6.03 others are probably affected as well. Status: Vendor has been notified weeks ago but refuses to answer or take any actions. phpkit1 is a simple German cms / portal software written in php similar to phpbb / phpnuke and is quite popular in Germany. All session...

Symantec Client Firewall Products 5 - SYMNDIS.SYS Driver Remote Denial of Service

Symantec Client Firewall Products 5 - SYMNDIS.SYS Driver Remote Denial of Service source: https://www.securityfocus.com/bid/9912/info Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet...

Symantec Client Firewall Products 5 - 'SYMNDIS.SYS' Driver Remote Denial of Service

source: https://www.securityfocus.com/bid/9912/info Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet processing routines of the affected software. It is reported that this vulnerability wi...

Denial Of Service in FreeChat 1.1.1a

Donato Ferrante Application: FreeChat http://sourceforge.net/projects/vbfreechat/ Version: 1.1.1a Bug: Denial Of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. T...

Mah-Jong 1.41.6 - Server Remote Denial of Service

Mah-Jong 1.41.6 - Server Remote Denial of Service source: https://www.securityfocus.com/bid/8558/info A remote denial of service vulnerability has been reported to affect the mah-jong game server. The issue has been reported to be exploitable so that a remote attacker may trigger a tight loop in...