DoS in FirstClass Internet Services 5.770

We got a bizarre malformed mail from some dot com that hasn't learned about BCC yet with a 1.4 meg To: Header. The mail was handled fine by Software.com's Post.Office, but when Post.Office tried to pass the mail to our FirstClass server, the First Class Internet Services process would hang. I wro...

DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0010.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Локальный DoS через mmap в FreeBSD

Из-за некорректной обработки сбоев при отображении страниц памяти возможно завесить систему...

Adtran DoS

Hi Gang, While testing some new gear, I found a serious problem with the Adtran MX2800 M13 Multiplexer. This device aggregates up to 28 T1's onto a Channelized DS3 interface and is primarlly used in cases where you've got a lot of T1's. The unit I have has dual redundant controller cards so I don...

New DOS on Interscan NT/3.32

One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...

WebObjects DoS

Howdy, We've found a DoS in WebObjects apps with a possible remote exploit. So far we've found this problem in WebObjects 4.5 Developer running with the CGI-adapter and IIS 4.0 on NT 4.0 SP5. WO 4.5 Beta on Solaris 2.6 with Netscape Enterprise isn't vulnerable. Overview: If you send a large 4.1K...

CVE-1999-0193

CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...

CVE-1999-0011

CVE-1999-0011 corresponds to Denial of Service vulnerabilities in BIND 4.9 and BIND 8, reported across multiple vendors. Public records indicate DoS via CNAME records and zone transfers. Affected products include BIND 4.9.x and 8.x; the root cause is not detailed in the provided documents beyond ...

freebsd_DoS.txt

Subject: Local DoS in FreeBSD To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This was first posted to the FreeBSD security list on the 9th of August, subsequently discussed on freebsd-stable and freebsd-hackers... no one seems to care, even though it is able to lock u...

nmap-DoS-2.txt

Date: Wed, 23 Dec 1998 09:31:23 -0500 From: Richard Reiner Reply-To: Bugtraq List To: [email protected] Subject: SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability can crash systems or disable critical...

flowpoint2000.txt

Date: Tue, 11 Aug 1998 20:35:20 -0700 From: Jason Ackley Subject: DoS in Flowpoint 2000 DSL routers Hello, Quick Overview: There exists a DoS in Flowpoint's ADSL 2000 router 'fp2k' running software rev 1.2.3 anyone have other revs to test? Lil Backgrounder: Flowpoint builds the routers and...

sendmail.8.9.1.DoS.txt

Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...

ipop3d.4.xx.bof.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Overflow in CAC.Washington.EDU ipop3d 4.xx CAC.Washington.EDU ipop3d 4.xx, at least on Linux platform, has serious security hole. When data is read from so-called mailbox lock created in /tmp directory this happens under certain condition...

Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...