CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7599  CVE-2003-0775  Candidate  saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).  Assigned (20030910)  None (candidate not yet proposed)    View
7600  CVE-2003-0776  Candidate  saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.  Assigned (20030910)  None (candidate not yet proposed)    View
7601  CVE-2003-0777  Candidate  saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).  Assigned (20030910)  None (candidate not yet proposed)    View
7602  CVE-2003-0778  Candidate  saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).  Assigned (20030910)  None (candidate not yet proposed)    View
7603  CVE-2003-0779  Candidate  SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.  Assigned (20030911)  None (candidate not yet proposed)    View

Page 769 of 20943, showing 5 records out of 104715 total, starting on record 3841, ending on 3845

Actions