6390 matches found
CVE-2000-0335
The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...
CVE-2000-0335: Undefined Security Weakness
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
DoS против NetProwler
пакет с IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH приводит к краху IDS при включеной сигнатуре Man-in-the-Middle...
RFP2K05.txt
---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...
Уязвимость в BlackICE IDS
Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...
CVE-2000-0335
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
piranha default password/exploit
Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
CVE-1999-0598
CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...
CVE-2000-0086
The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...
CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
CVE-1999-0600
A CVE-1999-0600 entry concerns a network intrusion detection system (IDS) that does not verify the checksum on a packet. The connected Red Hat, CVE, NVD, and CVE List records reiterate the same description, but do not specify affected products, versions, or a concrete root cause beyond missing ch...
CVE-1999-0599
Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0913
The CVE-1999-0913 entry concerns the dfire.cgi script in Dragon-Fire IDS, where remote users can trigger command execution by supplying shell metacharacters. This is a remote, unauthenticated exposure (attack vector: network) with high impact on confidentiality, integrity, and availability (C/C/I...
CVE-1999-0913: Undefined Security Weakness
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
CVE-2000-0086
Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
CVE-1999-0699: Undefined Security Weakness
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...