CVE-1999-0305

The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...

CVE-1999-0305

The vulnerability CVE-1999-0305 affects the BSD sysctl facility where source-routed packets are not properly restricted. OpenBSD 2.2 and earlier and FreeBSD 2.2.5 and earlier are affected, allowing remote attackers to spoof TCP connections when the dosourceroute or forwarding variables are set. T...

CVE-1999-0116

CVE-1999-0116: DoS via SYN flood — attacker sends many SYN packets to create numerous half-open connections, never sending ACKs, exhausting resources. Related entries (e.g., Sony Bravia TV, Axesstel MV 410R) reference this CVE as related. Remediation details are not provided in the supplied docum...

CVE-1999-0116

Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood...

CVE-1999-0160

CVE-1999-0160 affects classic Cisco IOS devices and involves a vulnerability in PPP CHAP authentication that can allow establishing unauthorized PPP connections. The described issue targets PPP CHAP authentication in Cisco IOS software (not necessarily all platforms) and is noted in several sourc...

CVE-2000-0374

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions...

netscape4.5-applets.txt

Date: Tue, 2 Feb 1999 13:42:32 -0800 From: Giao Nguyen To: [email protected] Subject: Unsecured server in applets under Netscape Just for kicks, I wrote a sample applet that listened on a socket. I discovered that when the applet was loaded under Netscape as tested with version 4.5, any hosts...

ie0199.exe-trojan.txt

Date: Thu, 28 Jan 1999 20:12:39 -0500 From: Mark E. Duck To: [email protected] Subject: E-mailed Trojan There is a trojan horse circulating the Internet as an attachment in email with a spoofed email address of Microsoft Corporation. It contains an announcement and an attachment that is...

process.table.attacks.txt

Date: Fri, 19 Feb 1999 16:08:06 -0500 From: "Simson L. Garfinkel" Subject: Process-table attack Wide-ranging attack works against almost any UNIX systems on the Internet ABSTRACT: The Process Table Attack is a relatively new kind of denial-of-service attack that can be waged against numerous...

kki.inactive.connections.txt

Date: Wed, 28 Apr 1999 13:59:28 +0200 From: Lukasz Luzar To: [email protected] Subject: KKIS.28041999.002.b S E C U R I T Y Contacts KKI Security Team Cracow Commercial Internet http://www.security.kki.pl http://www.kki.pl mailto:[email protected] mailto:[email protected] Informations Raport...

msie.5.typedURL.ftp.address.txt

Date: Thu, 6 May 1999 12:14:51 -0600 From: Mark To: [email protected] Subject: Odd Behavior in IE5 Has anyone noticed this? After you visit an FTP site, IE5 places that URL in the TypedURLs list just like it does with Web site addresses, as seen in the drop down "Address" list at t...

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service source: https://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1...

Check Point Software Firewall-1 3.0/1 4.0 - Table Saturation Denial of Service

source: https://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1 handles TCP connections. Typically to initiate a TCP connection, a SYN packet i...

Squid Web Proxy 2.2 - cachemgr.cgi Unauthorized Connection

Squid Web Proxy 2.2 - cachemgr.cgi Unauthorized Connection source: https://www.securityfocus.com/bid/2059/info The 'cachemgr.cgi' module is a management interface for the Squid proxy service. It was installed by default in '/cgi-bin' by Red Hat Linux 5.2 and 6.0 installed with Squid. This script...

Multiple Unix Netstat Service Remote Information Disclosure

The remote host is running a 'netstat' service on this port. The 'netstat' service provides useful information to an attacker, since it gives away the state of the active connections. It is recommended that you disable this service if you do not use it. C Tenable Network Security, Inc. include...

CVE-1999-0571

A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...

CVE-1999-1582

By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not...

FreeBSD-SA-98:03.ttcp

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-98:03 Security Advisory FreeBSD, Inc. Topic: Problems with TTCP Category: core Module: kernel Announced: 1998-05-14, revised at 1998-05-18 Affects: FreeBSD 2.1. FreeBSD 2.2....

CVE-1999-0919

A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections...

CVE-1999-1075

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver ToolTalk server, but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not...