Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2005-12-14 CVE-2005-1928 Resource Management Errors vulnerability in Trend Micro Serverprotect Earthagent 5.58
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
network
low complexity
trend-micro CWE-399
7.8
2005-11-21 CVE-2005-3732 Resource Management Errors vulnerability in Ipsec-Tools
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
network
low complexity
ipsec-tools CWE-399
7.8
2005-11-20 CVE-2005-2709 Resource Management Errors vulnerability in Linux Kernel
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
local
low complexity
linux CWE-399
4.6
2005-11-17 CVE-2005-3644 Resource Management Errors vulnerability in Microsoft Windows 2000 and Windows XP
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
network
low complexity
microsoft CWE-399
7.8
2005-11-05 CVE-2005-3501 Resource Management Errors vulnerability in Clamav
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
network
clamav CWE-399
4.3
2005-10-25 CVE-2005-2708 Resource Management Errors vulnerability in Linux Kernel
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.
local
low complexity
linux CWE-399
2.1
2005-10-23 CVE-2005-3294 Resource Management Errors vulnerability in Typsoft FTP Server
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands.
network
low complexity
typsoft CWE-399
5.0
2005-08-23 CVE-2005-2099 Resource Management Errors vulnerability in Linux Kernel
The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.
network
low complexity
linux CWE-399
5.0
2005-08-12 CVE-2005-2548 Resource Management Errors vulnerability in Linux Kernel 2.6.8
vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd.
network
low complexity
linux CWE-399
5.0
2005-07-26 CVE-2005-2370 Resource Management Errors vulnerability in multiple products
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
network
low complexity
ekg rob-flynn CWE-399
5.0