Multiple bugs in Unreal engine

It's possble to use game servers for DDoS, game session spoofing, integer type overflows, unreal:// URL handling problems...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...

PivX Multi-Vendor Game Server dDoS Advisory

Mike Kristovich, PivX Security Advisory MK001 Date: November 26, 2002 Released: January 16, 2002 Application: Battlefield 1942 Server and Dedicated Server America's Army Unreal Tournament 2003 and more.. see section 2. Version: All up to current. Bug: Server status port replies to spoofed UDP...

UT DDoS risk

Application: Unreal Tournament Win version, Linux and Mac not tested Version: all the version 436 vulnerable too Bug: UT servers send a great number of packets to every host that send only 1 packet to them, for 2 min and 30 sec Risk: UT servers used as flooders, DDoS risk Author: Auriemma Luigi...

CVE-2001-0750

CVE-2001-0750 affects Cisco IOS 12.1(2)T and 12.1(3)T. A remote attacker can cause a denial of service (reload) by connecting to TCP ports 3100–3999, 5100–5999, 7100–7999, or 10100–10999. The issue is triggered by a scanner making connections to these ports, leading to a reload of the router (mem...

CVE-2000-0619

The CVE-2000-0619 entry concerns Top Layer AppSwitch 2500, where remote attackers can cause a denial of service by sending malformed ICMP packets. Documents consistently describe the affected product and the impact (availability disruption) but do not provide exploit details, affected versions, o...

CVE-2001-0932

The CVE-2001-0932 issue affects Cooolsoft PowerFTP Server 2.03 and is caused by a buffer overflow in processing a long command. This vulnerability could allow remote attackers over the network to cause a denial of service and possibly execute arbitrary code. The provided documents describe the af...

Linksys 'routers', SNMP issues

Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...

ISS Security Alert: Multiple Vulnerabilities in Universal Plug and Play Service

Internet Security Systems Security Alert December 20, 2001 Multiple Vulnerabilities in Universal Plug and Play Service Synopsis: ISS X-Force is aware of multiple vulnerabilities with the Universal Plug and Play Service UPnP included with several Microsoft Windows operating systems. UPnP is a...

CVE-2001-0488

This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...

CVE-2001-0566

CVE-2001-0566 affects Cisco Catalyst 2900XL switches. A remote attacker can cause a denial-of-service by sending an empty UDP packet to UDP port 161 (SNMP) when SNMP is disabled. The vulnerability is tied to handling of unsolicited SNMP traffic even with SNMP disabled, leading to partial availabi...

CVE-2000-0708

Affected product: Pragma Systems TelnetServer 2000, version 4.0. Vulnerability: buffer overflow in the rexec port handling, triggered by a long series of null characters. Impact: remote attacker could cause a denial of service. Exploitation status: not provided in the documents. Remediation: no f...

mstream DDoS Agent Detection

The remote host appears to be running a mstream agent, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool It is very likely that this host has been compromised %NASLMINLEVEL 70300 C Tenabl...

mstream DDoS Handler Detection

The remote host appears to be running a mstream handler, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool It is very likely that this host has been compromised %NASLMINLEVEL 70300 C...

Newsletter 35

RSA Web site defaced Amazon.com, eBay & CNN all targeted with DDoS President Clinton convenes meeting on internet security Infosec professionals like yourself can't afford to miss out on late breaking news, in-depth analysis, product reviews and more in each issue of Information Security Magazine...

CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...

CVE-2000-0138

A system has a distributed denial of service DDOS attack master, agent, or zombie installed, such as 1 Trinoo, 2 Tribe Flood Network TFN, 3 Tribe Flood Network 2000 TFN2K, 4 stacheldraht, 5 mstream, or 6 shaft...

CVE-1999-0349

CVE-1999-0349 is a vulnerability in Microsoft IIS FTP Server where a buffer overflow in the FTP LIST (ls) / NLST handling allows remote attackers to cause a denial of service, and in some cases may execute arbitrary commands. The issue is tied to the IIS FTP service’s command processing and memor...