CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

[SECURITY] [DSA 414-1] New jabber packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 414-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

CVE-2003-1329

ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service...

DEBIAN-CVE-2003-1307

The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: th...

[RHSA-2003:296-01] Updated stunnel packages available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated stunnel packages available Advisory ID: RHSA-2003:296-01 Issue date: 2003-11-24 Updated on: 2003-11-24 Product: Red Hat Linux Keywords:...

xinetd memory leak DoS

144 bytes are leaked on unsuccessful connection...

MacOS X Personal Firewall protection bypass

Only TCP connections are blocked with firewall...

Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service

Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service source: https://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are...

SpeakFreely for Win <= 7.6a spoofed DoS

Luigi Auriemma Application: SpeakFreely http://www.fourmilab.ch/speakfree/ http://speak-freely.sourceforge.net Versions: = 7.6a Platforms: Windows Unix versions are NOT vulnerable Bug: Remote crash caused by multiple spoofed connections Risk: Low Author: Luigi Auriemma e-mail: [email protected]...

Cacheflow CacheOS 4.1.10016 - HTTP HOST Proxy

Cacheflow CacheOS 4.1.10016 - HTTP HOST Proxy source: https://www.securityfocus.com/bid/8584/info Malicious HTTP HOST header field can be used on CacheOS to tunnel arbitrary TCP connections through a HTTP request. It has been reported that CacheFlow CacheOS may allow the misuse of the HOST header...

Polycom ViaVideo Web Server Incomplete HTTP Connection Saturation Remote DoS

The remote web server locks up when several incomplete web requests are sent and the connections are kept open. Some servers e.g. Polycom ViaVideo even run an endless loop, using much CPU on the machine. Nessus has no way to test this, but you'd better check your machine. C Tenable Network...

Piolet Client 1.05 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== Piolet Client 1.05 Remote Denial of Service Exploit =================================================== / Piolet client v1.05 Remote Denial of Service Proof of Concept by Luca Ercoli...

DSA-372 netris - buffer overflow

Bulletin has no description...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...

DEBIAN-CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

Xinetd 2.1.x/2.3.x - Rejected Connection Memory Leakage Denial of Service

source: https://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated connections to a vulnerable Xinetd server will result in the consumption of a...

Netgear Logging Vulnerability

Netgear logging vulnerability Introduction Tested Vulnerable Vendor Discussion PoC Stuff Introduction There is a problem in the way Netgear routers log outgoing HTTP connections which could lead to log corruption as well as dangerous character or script injection. Tested Vulnerable Model: RP114...

CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

CVE-2002-0381

The TCP implementation in various BSD operating systems tcpinput.c does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address...