Licensing Firewall-1 DoS Attack

I have identified a denial of service attack that can be launched against Firewall-1 that has identical results to the IP fragmentation attack identified by Lance Spitzner. Symptoms: Firewall CPU hits 100 utilization, console locks up, a reboot only temporarily solves the problem. Vulnerable: All...

CVE-2000-0983

Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service CPU utilization via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability...

CVE-2000-0965: Undefined Security Weakness

The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service high CPU utilization...

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption (Denial of Service)

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption Denial of Service source: https://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to...

Microsoft Internet Explorer 5.0.1/5.5 - 'mstask.exe' CPU Consumption (Denial of Service)

source: https://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to cause CPU utilization DoS. Sending malformed arguments to the mstask.exe service wil...

MS Windows (Jolt2.c) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================== MS Windows Jolt2.c Denial of Service Exploit ============================================== / File: jolt2.c Author: Phonix Date: 23-May-00 Description: This is the proof-of-concept code for the Windo...

Microsoft Windows - Jolt2.c Denial of Service (MS00-029)

Microsoft Windows - Jolt2.c Denial of Service MS00-029 / File: jolt2.c Author: Phonix Date: 23-May-00 Description: This is the proof-of-concept code for the Windows denial-of-serice attack described by the Razor team NTBugtraq, 19-May-00 MS00-029. This code causes cpu utilization to go to 100%...

Microsoft Windows - 'Jolt2.c' Denial of Service (MS00-029)

/ File: jolt2.c Author: Phonix Date: 23-May-00 Description: This is the proof-of-concept code for the Windows denial-of-serice attack described by the Razor team NTBugtraq, 19-May-00 MS00-029. This code causes cpu utilization to go to 100%. Tested against: Firewall-1 Written for: My Linux box...

McMurtreyWhitaker Associates Cart32 3.03.13.5 - Denial of Service

McMurtreyWhitaker Associates Cart32 3.03.13.5 - Denial of Service source : https://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause th...

Security Bulletin (MS00-077)

Microsoft Security Bulletin MS00-077 - -------------------------------------- Patch Available for "NetMeeting Desktop Sharing" Vulnerability Originally posted: October 13, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in NetMeeting, an application th...

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service

source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to spike to 100% and any existing...

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over...

CVE-2000-0580

Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...

CVE-2000-0580

CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...

SX-20000620-2

FSC Internet Corp. / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-2 - Multiple ports/protocols partial Denial of Service in Microsoft Windows 2000 Server Summary Multiple ports and protocols on Microsoft Windows 2000 Server are susceptible to a simple network attack which raises CPU...

CVE-2000-0580

Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion (Denial of Service)

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the...

Check Point Software Firewall-1 4.0/1.4.1 - Resource Exhaustion (Denial of Service)

source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the firewall's CPU utilization to 100%. Sending a stream of binary zeros or other invalid...

Microsoft Windows Server 2000 - Remote CPU-overload

source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68, 135, 137, 500, 1812, 1813, 2535,...

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire...