Sun Solaris TCP SYN Flood远程拒绝服务漏洞

BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...

ie7-dos.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Internet Explorer Version 7.0.5730.11 Impact: Browser crash possibly more Author: Jesus Oquendo echo @infiltrated|sed 's/^/sil/g;s/$/.net/g' I. BACKGROUND Why bother? Who doesn't know what Internet Explorer and Microsoft are. II. DESCRIPTION ...

TippingPoint IPS intrusion prevention system DoS

Large CPU consumption on HTML documents parsing...

[Full-Disclosure] Freeze in Pigeon Server 3.02.0143

Luigi Auriemma Application: Pigeon Server http://www.tech-noel.com Versions: = 3.02.0143 Platforms: Windows Bug: freeze Risk: medium Exploitation: remote, versus server Date: 16 September 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Norton AntiVirus Denial of Service Vulnerability

No description provided by source. Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 not vulnerable Mcafee 7 Mcafee 8 Risk Impact: Medium Remote: yes Description: While having a virus...

CVE-2004-0478

Unknown versions of Mozilla allow remote attackers to cause a denial of service high CPU/RAM consumption using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U...

Opera 7 - Denial of Service

source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser to terminate or freeze. This...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

Microsoft Windows Server 2000 - Lanman Denial of Service 2 source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and...

Microsoft Windows Server 2000 - Lanman Denial of Service (2)

source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage...

Leafnode security announcement SA:2002:01

-----BEGIN PGP SIGNED MESSAGE----- leafnode-SA-2002:01.versions Topic: vulnerabilities in leafnode Announcement: leafnode-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-12-29 Category: main Type: denial of service Impact: CPU busy loop Credits: Jan Knutar jknutar, nic dot fi, fo...

Microsoft Windows Server 2000 - Lanman Denial of Service (1)

Microsoft Windows Server 2000 - Lanman Denial of Service 1 // source: https://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU a...

UDP Ping-pong in Win2k

Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...

VIGILANTE-2000009.txt

"Invalid URL" DoS Advisory Code: VIGILANTE-2000009 Release Date: September 6, 2000 Systems Affected: - Internet Information Server 4.0 for Windows NT 4.0 - Possibly Windows NT 4.0 in general read Microsoft's note THE PROBLEM A certain series of requests can cause INETINFO.EXE to gradually consume...

Check Point Software Firewall-1 4.01 4.1 - Fragmented Packets Denial of Service

Check Point Software Firewall-1 4.01 4.1 - Fragmented Packets Denial of Service // source: https://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available...

oracle8-tnslsnr-DoS.txt

Oracle8 TNSLSNR DoS Jason Ackley [email protected] Mon, 28 Dec 1998 16:21:20 -0800 Greetings, I hope everyone had happy holidays with the IOS and Sun bugs, but now its time to get back to business.. Ohhh OK, one more DoS ! : Hopefully this is new, I searched the archives for 'tns' and 'oracle', bu...

CVE-1999-1567

Seapine Software TestTrack server allows a remote attacker to cause a denial of service high CPU via 1 TestTrackWeb.exe and 2 ttcgi.exe by connecting to port 99 and disconnecting without sending any data...

Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/503/info The IMail ldap service has an unchecked buffer, resulting in a classic buffer overflow vulnerability. While it does not crash the service, it drives CPU utilization up rendering the system essentially unusable. Telnet to target machine, port 389...