exploits , vulnerabilities , articles , Multiple Vendor XML Parser Denial Of Service Vulnerability

Title	Multiple Vendor XML Parser Denial Of Service Vulnerability
Published	2002-12-16-12:00AM
Updated	2002-12-16-05:32PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this vulnerability credited to Amit Klein <Amit.Klein@SanctumInc.com>.
Vulnerable	The Expat Developers Expat 1.95.4 The Expat Developers Expat 1.95.2 The Expat Developers Expat 1.95.1 Sybase Enterprise Application Server 4.1.3 Sybase Enterprise Application Server 4.1.2 Sybase Enterprise Application Server 4.1.1 Sybase Enterprise Application Server 4.1 Sun ONE Web Server 6.0 SP5 Sun ONE Web Server 6.0 SP4 Sun ONE Web Server 6.0 SP3 Sun ONE Web Server 6.0 SP2 Sun ONE Web Server 6.0 SP1 Sun ONE Web Server 6.0 Sun ONE Web Server 4.1 SP11 Sun ONE Web Server 4.1 SP10 Sun ONE Web Server 4.1 IBM Websphere Application Server 4.0.3 IBM Websphere Application Server 3.5.3 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5.1 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5 IBM Websphere Application Server 3.0.2 .1 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.4 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.3 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Novell Netware 5.0 Sun Solaris 8.0 IBM Websphere Application Server 2.0 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Novell Netware 5.0 Sun Solaris 8.0 Apache Software Foundation Xerces2 Java Parser 2.2.1 Apache Software Foundation Xerces2 Java Parser 2.2 .0 Apache Software Foundation Xerces2 Java Parser 2.1 .0 Apache Software Foundation Xerces2 Java Parser 2.0.2 Apache Software Foundation Xerces Perl 1.7 .01 Apache Software Foundation Xerces C 2.1 .0 Apache Software Foundation Axis 1.1 beta Apache Software Foundation Axis 1.0
Not Vulnerable
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability