Re: Zyxel Prestige 681 and 1600 (possibly other?) remote DoS

On Friday 14 December 2001 12:08, Przemyslaw Frasunek wrote: The workaround is to switch off routing and put device in bridging mode. Zyxel support has been notified, I won't release details of attack, until ZyNOS will be patched. I haven't received any response from Zyxel helpdesk so time to...

Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution

-- Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution -- Problem discovered: 16/11/2001 by Cabezon Aurйlien | [email protected] http://www.isecurelabs.com/article.php?sid=209 -- Description -- This Phpnuke addon includes web frontends for the following nix...

CVE-1999-1070

Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter...

CVE-1999-1070: Undefined Security Weakness

Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter...

CVE-2001-0313

Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings echo requests to the network...

CVE-2000-0742: Undefined Security Weakness

The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability...

CVE-2001-0313

Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings echo requests to the network...

CVE-2001-0313: Undefined Security Weakness

Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings echo requests to the network...

CVE-2000-0292

The CVE-2000-0292 entry concerns the Adtran MX2800 M13 Multiplexer. The vulnerability is a remote DoS caused by sending a ping flood to the Ethernet interface, which crashes the device. The NVD record lists a CVSS v2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no...

CVE-2000-0292

The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash...

CVE-2000-0292: Undefined Security Weakness

The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash...

UDP Ping-pong in Win2k

Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...

CVE-2000-0742

The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability...

[RHSA-2000:087-02] Potential security problems in ping fixed.

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Potential security problems in ping fixed. Advisory ID: RHSA-2000:087-02 Issue date: 2000-10-17 Updated on: 2000-10-18 Product: Red Hat Linux Keywords: ping buffer overflows Cross...

Потенциальные дырки в ping

Несколько переполнений буфера...

CVE-2000-1213

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...

Security Bulletin (MS00-054)

Microsoft Security Bulletin MS00-054 - -------------------------------------- Patch Available for "Malformed IPX Ping Packet" Vulnerability Date Published: August 03, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 95, 98 and 98...

old DOS still good 4 win2k

Well, nothing new on the flatline, but I think that can be useful to send this one. We tested out the win 2k beta version, and we've found that some old attacks are still valid to cause a DOS. Specifically the simple ping flood from a PII 300 to another PII 300 with 64Mb RAM, can freez the box...

DoS против маршрутизаторов Cayman

Перполнение буфера при длинном имени пользователя и пароле администрирования вызывает перезагрузку маршрутизатора. Кроме того, маршрутизатор умирает при длительном пинге большими пакетами...

Cayman 3220H DSL Router Software Update and New Bonus Attack

Cayman 3220H DSL Router Software Update and New Bonus Attack Cayman has released a new software image version 5.5.0 build r1 to fix the DoS attack I reported a couple weeks ago. Details on the attack can be found here - http://www.securityfocus.com/vdb/bottom.html?vid=1219 You can get the new...