Searching technical software vulnerabilities

Various TCP/IP stacks and network applications

vulnerabilities | applications | maintaining | connection | completing | attackers | handshake | "NAPTHA" | flooding | attempts | attacker | Various | network | without | service | stacks | remote | denial | target | TCP/IP | state | class | cause | allow | host | TCP | aka |

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.


Multiple unknown vulnerabilities in L-Soft LIST

vulnerabilities | LISTSERV | Multiple | unknown | L-Soft |

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: this candidate may be SPLIT in the future when more precise technical details become available.


Multiple unspecified vulnerabilities in Oracle

vulnerabilities | Applications | unspecified | E-Business | Multiple | Oracle | Suite |

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS02 in the (a) CRM Technical Foundation component; (2) APPS03 in the (b) iProcurement component; and (3) APPS04, (4) APPS05, and (5) APPS06 in the Oracle Application Object Library component.


Multiple buffer overflows in LISTSERV 14.3 and

overflows | LISTSERV | Multiple | buffer |

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ended on Saturday, June 03, 2006.


Software vulnerabilities results 1 to 5 of 5     
Page: 1