inetd DoS exploit

Name: inetd DoS exploit Author: SeregaLinux ser@ihg prog$ ./pscaner -h 127.0.0.1 / it's my port scaner / Open ports on 127.0.0.1 ----------------------------- 21 OPEN : 220 ihg.localhost FTP server Version wu-6.6.65 Sat Feb 17 15:10:44 MSK 2001 ready. 23 OPEN : 25 OPEN : 220 ihg.localhost ESMTP...

CVE-2001-1435

inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service network connection loss by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services...

CVE-2001-0106

Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server...

DoS против inetd в RH linux

Некорректно закрываются сокеты, что приводит к утечке ресурсов...

[RHSA-2001:006-03] Updated inetd packages available for Red Hat Linux 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated inetd packages available for Red Hat Linux 6.2 Advisory ID: RHSA-2001:006-03 Issue date: 2001-01-25 Updated on: 2001-01-30 Product: Red Hat Linux Keywords: inetd close...

Security Advisory: FreeBSD-SA-01:11.inetd [REVISED]

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...

Дырка в inetd - ident (wheel file fragment reading)

Удаленно можно прочитать первые 16 символов кроме пробелов любого файла к которому имеет доступ группа wheel...

FreeBSD-SA-01:11.inetd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...

Possible DoS against inetd in Solaris

Hi, I stumbled upon something that looks like a bug in inetd on Solaris. If a Solaris box is portscaned by nmap with -T Insane option very quick scan daemons that are started by inetd stop responding. That is you can connect to them, connection get accepted, by they don't display any banner or...

DoS против inetd в Solaris

При сканировании nmap -T выпадают все сервисы запущенные через inetd...

Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distributed system administration...

Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service

source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS...

CVE-1999-0216

Denial of service of inetd on Linux through SYN and RST packets...

CVE-1999-0216

The CVE-1999-0216 entry concerns a Denial of Service of inetd on Linux triggered by SYN and RST packets. Connected documents consistently describe inetd on Linux as the affected component and the root cause as crafted TCP packets causing denial of service. Public details in the PT-1997-1097 entry...

ssh.txt

Subject: remote DoS against inetd and ssh To: [email protected] Hi, At the beginning i'd like to excuse all of you if it is commonly well known hmm, i guess it is, but noone patched it ;. Both DoSs use something known as portfuck e.g. while true; do telnet host port & done. 1. If you use ...

nmap-DoS.txt

Date: Tue, 22 Dec 1998 13:40:45 -0800 From: Lamont Granquist Reply-To: Bugtraq List To: [email protected] Subject: Re: Nmap network auditing/exploring tool V. 2.00 released Another nmap-induced denial-of-service is against many machines inetd's when doing a TCP connect scan -sT with the result...

BSDI 4.0 tcpmux inetd - Crash

BSDI 4.0 tcpmux inetd - Crash source: https://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i It is also claimed...

BSDI 4.0 tcpmux / inetd - Crash

source: https://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i It is also claimed inetd will die if the Windows...

CVE-1999-1075

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver ToolTalk server, but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not...