DEBIAN-CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

CVE-2003-0625

Removed by vendor...

PT-2003-1036 · Xfstt · Xfstt

Name of the Vulnerable Software and Affected Versions: xfstt affected versions not specified Description: The issue is related to an off-by-one error in xfstt, allowing remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake. This can lead ...

CVE-2003-0220: Undefined Security Weakness

Buffer overflow in the administrator authentication process for Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet...

TCP/IP implementations handle unusual flag combinations inconsistently

Overview Various vendors' TCP/IP implementations handle packets containing unusual flag combinations in different ways, which may lead to a violation of implicit or explicit security policies. Description Background on TCP/IP Connection Semantics To establish a TCP connection, a client and server...

CVE-2002-1824

Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear...

Nylon DoS

Closing client socket during SOCKS5 handshake causes server to hang with 100 CPU usage...

Kill a Unisys Clearpath with nmap port scan

Unisys "Clearpath" mainframes are very sensitive to the probes of nmap and similar programs. Basically, by only port-scanning not even fingerprinting, you can cause the entire machine to seize up. Yes, the whole machine...not just a job or the TCP/IP device. The problem may be occurring because t...

apache-linux.txt

/ LINUX X86 APACHE REMOTE EXPLOIT!!!!!!!!! This is the unpublished source for apache OpenSSL handshake exploit. We obtained this exploit by modifying a circulating apache worm, created by contem@efnet BY nebunu compile: gcc -o apache-ex apache.ex.c -lcrypto run: ./apache-ex do not use hostname! u...

OpenSSL servers contain a remotely exploitable buffer overflow vulnerability during the SSL3 handshake process

Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL servers that could lead to the execution of arbitrary code on the system Description Servers running OpenSSL pre-release version 0.9.7 with Kerberos...

OpenSSL clients contain a buffer overflow during the SSL3 handshake process

Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL clients that could lead to the execution of arbitrary code on the client's system. Description OpenSSL clients using SSLv3 prior to version 0.9.6e and...

OpenSSL servers contain a buffer overflow during the SSL2 handshake process

Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL servers that could lead to the execution of arbitrary code on the server. Description Versions of OpenSSL servers prior to 0.9.6e and pre-release...

CVE-2000-1039: Undefined Security Weakness

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities...

CVE-2000-0211

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...

CVE-2000-0211: Undefined Security Weakness

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...

CVE-2000-0211

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...

CVE-1999-0601

CVE-1999-0601 affects a network intrusion detection system (IDS) and is caused by improper handling of data within TCP handshake packets. The public records (NVD, CVE list, Red Hat entry) describe the vulnerability as an IDS failing to process TCP handshake data correctly, with a base CVSS v2.0 s...

CVE-1999-0601

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

CVE-1999-0601: Undefined Security Weakness

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service // source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service,...