sockets software vulnerabilities

Searching sockets software vulnerabilities

Linux gpm program allows local users to cause a

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.

Windows 98 and Windows 2000 Java clients allow

Windows |

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash.

The RPC code in Linux kernel 2.4 sets the reuse

The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd.

The getipnodebyname() API in AIX 5.1 and 5.2 do

The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).

The Microsoft Secure Sockets Layer (SSL) librar

Microsoft | Sockets | Secure | Layer |

The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.

Apache 1.4.x before 1.3.30, and 2.0.x before 2.

before | Apache | 14x |

Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."

Race condition in SELinux 2.6.x through 2.6.9 a

Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.

Off-by-one error in the mtr_curses_keyaction fu

Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.

The X server in SCO UnixWare 7.1.1, 7.1.3, and

UnixWare | server | SCO |

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.

Net-SNMP | before | 50x |

Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.

Cisco CallManager (CCM) 3.2 and earlier, 3.3 be

CallManager | Cisco |

Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe.

The LDAP client on Microsoft Windows 2000 befor

Microsoft | Windows | client | LDAP |

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.

nuauth in NuFW before 1.0.21 does not properly

before | nuauth | NuFW |

nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server.

The HTTP/XMLRPC server in Ruby before 1.8.2 use

HTTP/XMLRPC | before | server | Ruby |

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

The ip6_savecontrol function in NetBSD 2.0 thro

The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service (crash) by creating an IPv4-mapped IPv6 socket with the SO_TIMESTAMP socket option set, then sending an IPv4 packet through the socket.

FRAgent.exe in Mandiant First Response (MFR) be

FRAgentexe | Response | Mandiant | First |

FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double-free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.

Software vulnerabilities results 1 to 18 of 18

Page: 1

sockets software vulnerabilities

vulnerabilities.aspcode.net

Searching sockets software vulnerabilities