Security Best Practice: Preventing Non-TCP Flooding

Hackers directly target security devices such as firewalls. In advanced firewalls, state information about connections is maintained in a State table. The State table includes connection-oriented TCP and connectionless non-TCP protocols. Hackers can send high volumes of non-TCP traffic in an effo...

Ubuntu 4.10 / 5.04 : apache vulnerability (USN-160-2)

USN-160-1 fixed two vulnerabilities in the Apache 2 server. The old Apache 1 server was also vulnerable to one of the vulnerabilities CAN-2005-2088. Please note that Apache 1 is not officially supported in Ubuntu it is in the 'universe' component of the archive. For reference, this is the relevan...

Ubuntu 4.10 / 5.04 : apache2 vulnerabilities (USN-160-1)

Marc Stern discovered a buffer overflow in the SSL module's certificate revocation list CRL handler. If Apache is configured to use a malicious CRL, this could possibly lead to a server crash or arbitrary code execution with the privileges of the Apache web server. CAN-2005-1268 Watchfire...

iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability

Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=356&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro Inc.'s ServerProtect provides antivirus scanning with centralized management of virus...

Multiple OSs, routers and firewalls IPSec ISAKMP IKE DoS

Multiple vulnerabilities detected with PROTOS IPSec security scanner...

CVE-2002-2150

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as 1 TCP SYN flood, 2 UDP flood, or 3 Crikey CRC Flood, which causes the firewall to refuse any new connections...

CVE-2002-2150

Technical details for CVE-2002-2150 are not publicly available in the provided connected documents. The materials reproduce the description but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

Multiple firewalls protection bypass

The number of different way to break protection against client application attacks is almost unlimited...

Source routed packets

The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. OpenVAS Vulnerability Test $Id: sourcerouted.nasl 7273 2017-09-26 11:17:25Z cfischer $ Source routed packets Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program is free...

CheckPoint Firewall-1 Telnet Authentication Detection

A Firewall-1 Client Authentication Server is running on this port. Such an element allows an intruder to attempt to log into the remote network or to gather a list of valid user names by a brute-force attack. OpenVAS Vulnerability Test $Id: cp-firewall-auth.nasl 6032 2017-04-26 09:02:50Z teissa $...

Extreme Networks switches with ExtremeWare XOS allow arbitrary command execution

Overview Some Extreme Networks switches running ExtremeWare XOS have a vulnerability that allows a malicious authenticated user to escape to the underlying operating system command shell with administrator-level root privileges. Description Extreme Network switches running ExtremeWare XOS contain...

Multiple firewalls directory traversal protection bypass

No description provided...

Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerability

Description Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed TCP/IP packet. Reports indicate that the immediate consequences of...

freebsd/x86 connect 102 bytes

No description provided by source. ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and unreadable ; ; This is the FreeBSD...

freebsd/x86 connect 102 bytes

Exploit for freebsd/x86 platform in category shellcode ============================= freebsd/x86 connect 102 bytes ============================= ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...

Symantec firewalls multiple problems

Heap and stack overflows on NetBIOS name service packets parsing, endless loop on DNS packets parsing, stack overflow on oversized canonical DNS name...

Multiple Symantec firewall products contain a heap corruption vulnerability in the handling of NBNS response packets

Overview There is a heap corruption vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...

Symantec personal firewalls DoS

TCP packets with some options of zero langth causes system to hang...

TCP/IP implementations handle unusual flag combinations inconsistently

Overview Various vendors' TCP/IP implementations handle packets containing unusual flag combinations in different ways, which may lead to a violation of implicit or explicit security policies. Description Background on TCP/IP Connection Semantics To establish a TCP connection, a client and server...

Multiple Symantec Firewall Secure Webserver timeout DoS

Advanced IT-Security Advisory 01-10-2002 http://www.ai-sec.dk/ Issue: ====== Multiple Symantec Firewall Secure Webserver timeout DoS Problemdescription: =================== There exists a problem in "Simple, secure webserver 1.1" which is shipped with numerous Symantec firewalls, in which an...