Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2008-02-26 CVE-2008-0983 Resource Management Errors vulnerability in Lighttpd
lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.
network
low complexity
lighttpd CWE-399
5.0
2008-02-26 CVE-2008-0597 Resource Management Errors vulnerability in Easy Software products Cups 1.1.17/1.1.22
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.
network
low complexity
redhat easy-software-products CWE-399
5.0
2008-02-25 CVE-2008-0979 Resource Management Errors vulnerability in multiple products
Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function.
network
low complexity
double-take-software hp CWE-399
5.0
2008-02-25 CVE-2008-0977 Resource Management Errors vulnerability in Double-Take Software Double-Take 4.5/5.0.0.2865
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.
network
low complexity
double-take-software CWE-399
5.0
2008-02-25 CVE-2008-0976 Resource Management Errors vulnerability in multiple products
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a.
network
low complexity
double-take-software hp CWE-399
5.0
2008-02-25 CVE-2008-0974 Resource Management Errors vulnerability in multiple products
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.
network
low complexity
double-take-software hp CWE-399
5.0
2008-02-21 CVE-2008-0859 Resource Management Errors vulnerability in Kerio Mailserver
Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption.
network
low complexity
kerio CWE-399
5.0
2008-02-13 CVE-2008-0658 Resource Management Errors vulnerability in Openldap 2.3.39
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
network
low complexity
openldap CWE-399
4.0
2008-02-13 CVE-2007-6148 Resource Management Errors vulnerability in Adobe Connect Enterprise Server and Flash Media Server 2
Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests.
network
low complexity
adobe CWE-399
critical
10.0
2008-02-13 CVE-2008-0103 Resource Management Errors vulnerability in Microsoft Office
Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."
network
microsoft CWE-399
critical
9.3