IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service

---------------------------------------------------------------------------- IRM Security Advisory No. 010 Top Layer Attack Mitigator IPS 5500 Denial of Service Vulnerability Type / Importance: DoS / High Problem discovered: July 22nd 2004 Vendor contacted: July 23rd 2004 Advisory published: Augu...

Easy File Sharing Web Server 1.25 - Denial of Service

Easy File Sharing Webserver v1.25 Denial Of Service Proof Of Concept Code By GulfTech Security Research Easy File Sharing Webserver v1.25 will consume 99% of CPU usage until it crashes when sent large req's use IO::Socket; print "=====================================================n". " Easy Fil...

gnutls -- certificate chain verification DoS

Patric Hornik reports on a problem in the certificate chain verification procedures of GnuTLS that may result in a denial-of-service vulnerability: The certificate chain should be verified from last root certificate to the first certificate. Otherwise a lot of unauthorized CPU processing can be...

Norton AntiVirus Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ================================================ Norton AntiVirus Denial of Service Vulnerability ================================================ Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton...

Norton AntiVirus Denial of Service Vulnerability

No description provided by source. Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 not vulnerable Mcafee 7 Mcafee 8 Risk Impact: Medium Remote: yes Description: While having a virus...

[Full-Disclosure] Norton AntiVirus Scanner Remote Denial Of Service Vulnerability [Part: !!!]

Anti-Virus Scanner Remote Denial Of Service Vulnerability Part: !!! vulnerable ...only tested on! Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 not vulnerable Mcafee 7 Mcafee 8 Risk Impact: Medium Remote: yes Description: While having a virus scan...

CVE-2004-0478

Unknown versions of Mozilla allow remote attackers to cause a denial of service high CPU/RAM consumption using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U...

resources consumption in DiGi WWW Server

Donato Ferrante Application: DiGi WWW Server http://wwwserver.sourceforge.net Version: Compieuw.1 Bug: resources consumption Date: 27-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

Multiple WFTPD Denial of Service vulnerabilities

Name of Advisory: Multiple WFTPD Denial of Service vulnerabilities Severity: Low Discoverer: axl [email protected] Released: Today Vendor Notified: Today WFTPD who? what? when? Vendor quote: "WFTPD Server has been a leading FTP server for Windows since it was released in 1993. Its stability and...

brokerFTP.txt

Broker FTP DoS Message Server ------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html SUMMARY Beyond Security's SecurITeam has discovered two security vulnerabilities in the Broker FTP product, these vulnerabilities allow a remo...

CesarFTP v0.99g CPU OverLoad [Proof of concept]

Description : FTP server CesarFTP v0.99g has a security hole in the command CWD. This command allow somebody to rise up the CPU usage with the following command : USER user PASS pass CWD ..................per 10000.... The CPU utilisation will be equal to 100, the connection will not responding...

Polycom ViaVideo Web Server Incomplete HTTP Connection Saturation Remote DoS

The remote web server locks up when several incomplete web requests are sent and the connections are kept open. Some servers e.g. Polycom ViaVideo even run an endless loop, using much CPU on the machine. Nessus has no way to test this, but you'd better check your machine. C Tenable Network...

Opera 7 - Denial of Service

Opera 7 - Denial of Service source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser ...

Opera 7 - Denial of Service

source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser to terminate or freeze. This...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

Microsoft Windows Server 2000 - Lanman Denial of Service 2 source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage...

Leafnode security announcement SA:2002:01

-----BEGIN PGP SIGNED MESSAGE----- leafnode-SA-2002:01.versions Topic: vulnerabilities in leafnode Announcement: leafnode-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-12-29 Category: main Type: denial of service Impact: CPU busy loop Credits: Jan Knutar jknutar, nic dot fi, fo...

proftpd <=1.2.7rc3 DoS

Hello, proftpd is vulnerable to denial of service similar to the list /..//..//../. !/bin/sh proftpd =1.2.7rc3 DoS - Requires anonymous/ftp login at least might work against many other FTP daemons consumes nearly all memory and alot of CPU tested against slackware 8.1 - proftpd 1.2.4 and 1.2.7rc3...

ProFTPd 1.2.x - STAT Denial of Service

ProFTPd 1.2.x - STAT Denial of Service source: https://www.securityfocus.com/bid/6341/info A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will resu...

leafnode denial-of-service triggered by article request

The leafnode NNTP server may go into an unterminated loop with 100% CPU use when an article is requested by Message-ID that has been crossposted to several news groups when one of the group names is the prefix of another group name that the article was cross-posted to. Found by Jan Knutar...