2322 matches found
CVE-2005-1980: Undefined Security Weakness
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service hang via a crafted Transaction Internet Protocol TIP message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TI...
Insufficiently Protected Credentials
Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials. SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that...
[EXPL] TCP Chat(TCPX) DoS (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
DEBIAN-CVE-2005-0446
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service crash via certain DNS responses regarding 1 Fully Qualified Domain Names FQDN in fqdncache.c or 2 IP addresses in ipcache.c, which trigger an assertion failure...
security flaw
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...
security flaw
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...
PT-2004-1001 · Fanuc +7 · Fanuc 32I +8
Name of the Vulnerable Software and Affected Versions: Transmission Control Protocol TCP affected versions not specified FANUC 32i affected versions not specified All Cisco products which contain a TCP stack affected versions not specified FortiOS affected versions not specified Description: The...
Cisco Security Advisory: Vulnerabilities in H.323 Message Processing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Document ID: 47843 Revision 1.0 - INTERIM For Public Release 2004 January 13 UTC 1200 - -------------------------------------------------------------------------- Contents ========...
PT-2003-1620 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...
[SECURITY] [DSA-196-1] New BIND packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 196-1 [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 14th, 2002 http://www.debian.org/security/faq -...
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 1 // source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...
[NHC20000504a.0: NetBSD Panics when sent unaligned IP options]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII ,=wwmmm=, .,=""" "M ,gP" "& M & ,d" M, ,R "k ,P "k F W , Vk W '$ ,W M ,F M $ M J$ ,,,====,,, ,mM""""""MM@ W MP',,===="""""""",aP""""Mww M gF '& ,,0" -^ -"""""""F ' 'M& $ ,W $...
Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack
As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...
PT-1999-1114 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux versions 2.2.3 and earlier Description: The issue allows a remote attacker to perform an IP fragmentation attack, causing a denial of service. Recommendations: For Linux versions 2.2.3 and earlier, at the moment, there is no information...
PT-1999-1019 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue is related to how Windows NT TCP/IP processes fragmented IP packets, which can cause a denial of service. Recommendations: At the moment, there is no information about a newer...
PT-1997-1145
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns a machine with IP forwarding enabled, despite not being a router or firewall. This configuration could potentially lead to unauthorized access or misuse of network...
PT-1997-1150 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows IP traceroute from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-1996-1018 · Ibm +4 · Aix +8
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue involves oversized ICMP ping packets that can cause a denial of service. This is also known as the "Ping o' Death". Recommendations: At the moment, there is no information abou...
PT-1992-1002 · Sun · Sunos
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows for denial of service by sending forged ICMP unreachable packets. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
