Newsletter 35

RSA Web site defaced Amazon.com, eBay & CNN all targeted with DDoS President Clinton convenes meeting on internet security Infosec professionals like yourself can't afford to miss out on late breaking news, in-depth analysis, product reviews and more in each issue of Information Security Magazine...

CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-2000-0138

A system has a distributed denial of service DDOS attack master, agent, or zombie installed, such as 1 Trinoo, 2 Tribe Flood Network TFN, 3 Tribe Flood Network 2000 TFN2K, 4 stacheldraht, 5 mstream, or 6 shaft...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...

CVE-1999-0349

CVE-1999-0349 is a vulnerability in Microsoft IIS FTP Server where a buffer overflow in the FTP LIST (ls) / NLST handling allows remote attackers to cause a denial of service, and in some cases may execute arbitrary commands. The issue is tied to the IIS FTP service’s command processing and memor...