CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- openbsd opensshsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...7.8 High
- linux kernelThe Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of...4.9 Medium
- symantec client security, norton personal firewall, pcanywhere +4 more +6 moreThe \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other...4.9 Medium
- cisco catos, ios +1 moreThe VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers...7.8 High
- cisco iosThe VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a...7.8 High
- wiresharkThe SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to...5.4 Medium
- ibm db2IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause...4.0 Medium
- linux kernelThe Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...4.9 Medium
- high availability linux project heartbeatThe peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability...5.0 Medium
- heimdal, mit kerberos 5 +1 moreThe (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before...7.2 High
- isc dhcpdThe supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote...5.0 Medium
- iss blackice pc protection, blackice server protection, proventia a series xpu +7 more +9 moreThe SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x...5.0 Medium
- wiresharkUnspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0...5.0 Medium
- wiresharkUnspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99...5.0 Medium
- linux kernelThe ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly...7.8 High
- linux kernelThe suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16...4.6 Medium
- linux kernelSCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3...5.0 Medium
- mailenable enterprise, professional +1 moreThe SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and...5.0 Medium
- apple mac os x, mac os x server +1 moreOpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service...5.0 Medium
- sun java enterprise system, java system directory server +1 moreMemory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4...7.8 High
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial...5.0 Medium
- sendmailSendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,...5.0 Medium
- quaggabgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU...4.9 Medium
- nessusNessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of...2.6 Low
- powerdnsThe recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service ...5.0 Medium
- mozilla firefoxMozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of...5.1 Medium
- microsoft internet explorermshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to...2.6 Low
- phpThe substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause...6.4 Medium
- linux kernelip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of...4.9 Medium
- mozilla firefoxA regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service ...10.0 High
- mozilla firefox, suite, seamonkey +1 more +3 morensHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8,...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1...9.3 High
- phpPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and...2.1 Low
- tony cook imagerImager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service ...2.6 Low
- x-doom, zdaemon +1 moreThe (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp...5.0 Medium
- mailenable enterprise, professional +1 moreWebmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows...5.0 Medium
- ggz gaming zone gaming zoneGGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect)...5.0 Medium
- freecivpackets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service ...5.0 Medium
- freebsd, openbsd openssh +1 moreOpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked...5.0 Medium
- ncp network communications secure clientNCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local...2.1 Low
- ncp network communications secure clientNCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local...2.1 Low
- ipswitch whatsupNmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of...5.0 Medium
- qnx rtosQNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a ...4.9 Medium
- linux kernelLinux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send,...5.0 Medium
- 3com tippingpoint ips tosTippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1...5.0 Medium
- cisco aironet ap1100, aironet ap1130ag, aironet ap1200 +5 more +7 moreCisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated...5.5 Medium
- rockliffe mailsiteRockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a...7.8 High
- broadcom brightstor mobile backup, business protection suite, desktop protection suite +3 more +5 moreThe DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile...5.0 Medium
- broadcom brightstor mobile backup, business protection suite, desktop protection suite +3 more +5 moreThe DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA)...5.0 Medium
- linux kernelThe netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users...4.9 Medium
- Show moreLoading…