Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2007-12-07 CVE-2007-6279 Resource Management Errors vulnerability in Flac Libflac
Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
network
flac CWE-399
critical
9.3
2007-12-06 CVE-2007-5971 Resource Management Errors vulnerability in MIT Kerberos 5
Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
local
apple mit CWE-399
6.9
2007-12-06 CVE-2007-5901 Resource Management Errors vulnerability in MIT Kerberos 5
Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
local
apple mit CWE-399
6.9
2007-11-30 CVE-2007-5494 Resource Management Errors vulnerability in Redhat Enterprise Linux 4.0/5.0
Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.
local
low complexity
redhat CWE-399
4.9
2007-11-29 CVE-2007-4346 Resource Management Errors vulnerability in Symantec Backupexec System Recovery 11.0.6235/11.0.7170
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service (NULL dereference and service crash) via a crafted packet to port 5633/tcp.
network
low complexity
symantec CWE-399
5.0
2007-11-21 CVE-2007-5612 Resource Management Errors vulnerability in IBM Director
CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaustion, and daemon crash) via a large number of idle connections.
network
low complexity
ibm CWE-399
7.8
2007-11-20 CVE-2007-6053 Resource Management Errors vulnerability in IBM DB2 Universal Database
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
network
linux microsoft unix ibm CWE-399
critical
9.3
2007-11-20 CVE-2007-6044 Resource Management Errors vulnerability in IBM Websphere MQ 6.0
Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information.
network
low complexity
ibm CWE-399
critical
10.0
2007-11-20 CVE-2007-6040 Resource Management Errors vulnerability in Belkin F5D7230-4
The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service (degraded networking and logging) via a flood of TCP SYN packets, a related issue to CVE-1999-0116.
network
low complexity
belkin CWE-399
5.0
2007-11-15 CVE-2007-6005 Resource Management Errors vulnerability in Webex Communications Webex Gpccontainer Activex Control
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a denial of service (memory access violation and crash) via (1) an invalid argument to the InitParam method or (2) an unspecified vector involving the SetParam method.
4.3