354
Reference Description
https://www.cve.org/CVERecord?id=CVE-2004-0826
CVE-2004-0808 When domain logons are enabled, server allows remote attackers to cause a
denial of service via a SAM_UAS_CHANGE request with a length value that is
larger than the number of structures that are provided.
https://www.cve.org/CVERecord?id=CVE-2004-0808
CVE-2002-1357 Multiple SSH2 servers and clients do not properly handle packets or data
elements with incorrect length specifiers, which may allow remote attackers to
cause a denial of service or possibly execute arbitrary code.
https://www.cve.org/CVERecord?id=CVE-2002-1357
CVE-2004-0774 Server allows remote attackers to cause a denial of service (CPU and memory
exhaustion) via a POST request with a Content-Length header set to -1.
https://www.cve.org/CVERecord?id=CVE-2004-0774
CVE-2004-0989 Multiple buffer overflows in xml library that may allow remote attackers to
execute arbitrary code via long URLs.
https://www.cve.org/CVERecord?id=CVE-2004-0989
CVE-2004-0568 Application does not properly validate the length of a value that is saved in
a session file, which allows remote attackers to execute arbitrary code via
a malicious session file (.ht), web site, or Telnet URL contained in an e-mail
message, triggering a buffer overflow.
https://www.cve.org/CVERecord?id=CVE-2004-0568
CVE-2003-0327 Server allows remote attackers to cause a denial of service via a remote
password array with an invalid length, which triggers a heap-based buffer
overflow.
https://www.cve.org/CVERecord?id=CVE-2003-0327
CVE-2003-0345 Product allows remote attackers to cause a denial of service and possibly
execute arbitrary code via an SMB packet that specifies a smaller buffer length
than is required.
https://www.cve.org/CVERecord?id=CVE-2003-0345
CVE-2004-0430 Server allows remote attackers to execute arbitrary code via a LoginExt packet
for a Cleartext Password User Authentication Method (UAM) request with a
PathName argument that includes an AFPName type string that is longer than
the associated length field.
https://www.cve.org/CVERecord?id=CVE-2004-0430
CVE-2005-0064 PDF viewer allows remote attackers to execute arbitrary code via a PDF file
with a large /Encrypt /Length keyLength value.
https://www.cve.org/CVERecord?id=CVE-2005-0064
CVE-2004-0413 SVN client trusts the length field of SVN protocol URL strings, which allows
remote attackers to cause a denial of service and possibly execute arbitrary
code via an integer overflow that leads to a heap-based buffer overflow.
https://www.cve.org/CVERecord?id=CVE-2004-0413
CVE-2004-0940 Is effectively an accidental double increment of a counter that prevents a
length check conditional from exiting a loop.
https://www.cve.org/CVERecord?id=CVE-2004-0940
CVE-2002-1235 Length field of a request not verified.
https://www.cve.org/CVERecord?id=CVE-2002-1235
CVE-2005-3184 Buffer overflow by modifying a length value.
https://www.cve.org/CVERecord?id=CVE-2005-3184
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
CWE Version 4.14
CWE-131: Incorrect Calculation of Buffer Size
CWE-131: Incorrect Calculation of Buffer Size