Super strong 2 0 0 0 platform Shell ACKcmd Backdoor analysis-vulnerability warning-the black bar safety net

Description -=-=-=-=--= ACKcmd is to provide a Win2000 under remote command Shell is a backdoor, it uses TCP to transfer, but different from the normal TCP connection a three-way handshake, ACKcmd using only TCP ACK packets, so the General case can pass through firewalls and avoid IDS detection...

Information disclosure

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0121

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

Graphon Go-Global thin client and server solution buffer overflow

Buffer overflow in initial protocol handshake...

Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt3

Oct. 11, 2005 Dmitry V. Levin 0.9.7g-alt3 - Applied upstream fix for potential SSL 2.0 rollback during SSL handshake CAN-2005-2969...

CVE-2005-2643

CVE-2005-2643 affects Tor client versions up to 0.1.0.13 (and some 0.1.1.4-alpha builds) and describes a weakness in the ephemeral DH handshake that fails to reject certain weak keys. The consequence is that a malicious first-hop Tor server could learn the keys used for the rest of the circuit, e...

tor anonymity, integrity and confidentiality loss

DH handshake flaw causes situation first hop malicious server can lear all keay of client negotiation for the rest of the circuit...

Tor security advisory: DH handshake flaw

Versions affected: stable versions up through 0.1.0.13 and experimental versions up through 0.1.1.4-alpha. Impact: Tor clients can completely lose anonymity, confidentiality, and data integrity if the first Tor server in their path is malicious. Specifically, if the Tor client chooses a malicious...

Juniper NetScreen 5.0 - VPN Username Enumeration

Juniper NetScreen 5.0 - VPN Username Enumeration source: https://www.securityfocus.com/bid/14595/info The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN...

tor -- diffie-hellman handshake flaw

A tor advisory reports Tor clients can completely loose anonymity, confidentiality, and data integrity if the first Tor server in their path is malicious. Specifically, if the Tor client chooses a malicious Tor server for her first hop in the circuit, that server can learn all the keys she...

Multiple MDaemon mail server vulnerabilities

DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...

Moderate: Red Hat Security Advisory: gnutls security update

Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Laye...

Yager <= 5.24 Remote Buffer Overflow Exploit

No description provided by source. / Yager = 5.24 Remote Buffer Overflow Exploit cybertronicatgmxdotnet 04/25/2005 send all the money to Luigi Auriemma / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic -...

CVE-2001-1431

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third...

HP-UX PHSS_30639 : HP-UX Running Apache, Remote Denial of Service (DoS) (HPSBUX01019 SSRT4717 rev.3)

s700800 11.04 Virtualvault 4.7 IWS update : Two potential security vulnerabilities have been identified in OpenSSL by NISCC 224012/1 and 224012/2. The Common Vulnerabilities and Exposures project has referenced them as the following CAN-2004-0079, and CAN-2004-0112. The CERT summary is TA04-078A...

DEBIAN-CVE-2004-0112

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that causes an...

DEBIAN-CVE-2004-0079

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...

CVE-2004-0112

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that causes an...

CVE-2004-0307

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, and ONS 15454 SD before 4.13 allows remote attackers to cause a denial of service reset by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead...

CVE-2004-0079

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...