PT-2001-1393 · Microsoft · Wince

Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...

CVE-2000-0916

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...

CVE-2000-0916

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...

CVE-2000-0916

CVE-2000-0916 is a historical TCP-ISN prediction vulnerability affecting FreeBSD 4.1.1 and earlier (and possibly other BSD-based OSes). The root cause is an insufficient random initial sequence number (ISN) generator, enabling remote attackers to spoof TCP connections. Several connected sources c...

Дырка в pam_mysql (unescaped SQL sequence)

Ввод пользователя используется для построения SQL-запроса...

CVE-2000-0703

suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...

CVE-2000-0703

CVE-2000-0703 affects suidperl (sperl). The vulnerability arises because suidperl does not properly cleanse the escape sequence "~!" before invoking /bin/mail to report errors. This enables local users to gain privileges by setting the interactive environmental variable and running suidperl with ...

CVE-2000-0703

suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...

HERT advisory: FreeBSD IP Spoofing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------- HERT - Hacker Emergency Response Team [email protected] - http://hert.org Advisory: 00003 Title: FreeBSD IP Spoofing Date: 1st October 2000 Summary: IP Spoofing Sequence number predictio...

FreeBSD-SA-00:52.tcp-iss

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:52 Security Advisory FreeBSD, Inc. Topic: TCP uses weak initial sequence numbers Category: core Module: kernel Announced: 2000-10-06 Credits: Hacker Emergency Response...

SUIDPerl 5.00503 - Mail Shell Escape (1)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...

wftpd241.txt

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC10 11/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: An out of sequence RNTO...

Проблемы с libdes в NetBSD

Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...

CVE-2000-0178

CVE-2000-0178 affects Foundry Networks ServerIron switches, where predictable TCP/IP sequence numbers can enable remote attackers to spoof or hijack sessions. The available documents confirm the vulnerability and resulting impact (session spoofing/hijacking) but do not provide concrete remediatio...

CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...

CVE-1999-0599

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service // source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service,...

Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service

// source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service, including any open sessions during the time of the crash, is required in order t...