Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket

Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...

CVE-1999-0142

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

И еще одна дырка в Cisco IOS

При открытии 98 одновременных telnet-соединений маршрутизатор перезагружается из-за критической ошибки...

CVE-2000-0613

Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...

HP OpenView OmniBack II 2.553.03.1 - Denial of Service

HP OpenView OmniBack II 2.553.03.1 - Denial of Service source: https://www.securityfocus.com/bid/1015/info Multiple open connections to port 5555 can cause the HP OpenView OmniBack program to crash by consuming 100% CPU cycles. Closing the connections will not alleviate this problem, therefore a...

aix-snmp.txt

Following on from Michael Zalewski's recent SNMP post, here's an issue i noted on two AIX systems. NOTE: This was seen on both AIX 4.3 and 4.2. It appears that on the above releases of AIX, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The...

sshd.locked-accts.txt

NAME sshd-restricted-users-incorrect-configuration AUTHOR Marc SCHAEFER Andreas Trottmann THANKS OpenBSD security team VERSION $Id: sshd-restricted-users-incorrect-configuration,v 1.2 2000/01/25 10:27:56 schaefer Exp $ ABSTRACT In some cases where a system must be configured so that specific user...

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service source: https://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process...

CVE-1999-0919

Technical details (affected product/version, root cause, impact, exploit) are not publicly available in the provided documents; monitor for updates.

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...

CVE-1999-0571

CVE-1999-0571 describes a router configuration service or management interface (e.g., web server or Telnet) that is configured to allow connections from arbitrary hosts. Connected sources document ZyXEL/ZyXEL Router vulnerabilities involving default credentials or default passwords (Telnet/HTTP) ...

CVE-1999-0919

A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections...

CVE-1999-0831

Denial of service in Linux syslogd via a large number of connections...

CVE-1999-0290

The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost...

CVE-1999-1148

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via many passive PASV connections at the same time...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

dns-pro.dos.txt

Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability USSR Advisory Code: 22 Release Date: December 21, 1999 Systems Affected: DNS PRO v5.7 and possibly others. About The Software: The first DNS Server for Windows NT - Database engine five time faster. - Tabs now work in the...

PT-1999-1829 · Dns Pro · Dns Pro

Name of the Vulnerable Software and Affected Versions: DNS PRO affected versions not specified Description: The issue allows remote attackers to conduct a denial of service via a large number of connections. Recommendations: At the moment, there is no information about a newer version that contai...

PT-1999-1399 · Alt N · Mdaemon

Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...