HP OpenView OmniBack II 2.553.03.1 - Denial of Service

HP OpenView OmniBack II 2.553.03.1 - Denial of Service source: https://www.securityfocus.com/bid/1015/info Multiple open connections to port 5555 can cause the HP OpenView OmniBack program to crash by consuming 100% CPU cycles. Closing the connections will not alleviate this problem, therefore a...

aix-snmp.txt

Following on from Michael Zalewski's recent SNMP post, here's an issue i noted on two AIX systems. NOTE: This was seen on both AIX 4.3 and 4.2. It appears that on the above releases of AIX, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The...

sshd.locked-accts.txt

NAME sshd-restricted-users-incorrect-configuration AUTHOR Marc SCHAEFER Andreas Trottmann THANKS OpenBSD security team VERSION $Id: sshd-restricted-users-incorrect-configuration,v 1.2 2000/01/25 10:27:56 schaefer Exp $ ABSTRACT In some cases where a system must be configured so that specific user...

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service

Netopia Timbuktu Pro Remote Control 2.05.2.1 - Denial of Service source: https://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process...

CVE-1999-0919

Technical details (affected product/version, root cause, impact, exploit) are not publicly available in the provided documents; monitor for updates.

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...

CVE-1999-0919

A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections...

CVE-1999-0571

CVE-1999-0571 describes a router configuration service or management interface (e.g., web server or Telnet) that is configured to allow connections from arbitrary hosts. Connected sources document ZyXEL/ZyXEL Router vulnerabilities involving default credentials or default passwords (Telnet/HTTP) ...

CVE-1999-0831

Denial of service in Linux syslogd via a large number of connections...

CVE-1999-0290

The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost...

CVE-1999-1148

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via many passive PASV connections at the same time...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

dns-pro.dos.txt

Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability USSR Advisory Code: 22 Release Date: December 21, 1999 Systems Affected: DNS PRO v5.7 and possibly others. About The Software: The first DNS Server for Windows NT - Database engine five time faster. - Tabs now work in the...

PT-1999-1829 · Dns Pro · Dns Pro

Name of the Vulnerable Software and Affected Versions: DNS PRO affected versions not specified Description: The issue allows remote attackers to conduct a denial of service via a large number of connections. Recommendations: At the moment, there is no information about a newer version that contai...

PT-1999-1399 · Alt N · Mdaemon

Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...

CVE-1999-0160

Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections...

CVE-1999-0526

An X server's access control is disabled e.g. through an "xhost +" command and allows anyone to connect to the server...

CVE-1999-0305

The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...

CVE-1999-0305

The vulnerability CVE-1999-0305 affects the BSD sysctl facility where source-routed packets are not properly restricted. OpenBSD 2.2 and earlier and FreeBSD 2.2.5 and earlier are affected, allowing remote attackers to spoof TCP connections when the dosourceroute or forwarding variables are set. T...