sans.sec-v3n5.txt

Subject: May SANS Security Digest Vol. 3 Num. 5 Fr: Rob the SANS Mailing List Guy Here's the May SANS Network Security Digest. I hope your spring is going well! RK -----BEGIN PGP SIGNED MESSAGE----- ================================================================= | | | @@@@ @@ @ @ @@@@ | | @ @ @...

retina.vs.iis4-round2-the.exploit.txt

http://www.eeye.com/database/advisories/ad06081999/ad06081999-exploit.html Retina vs. IIS4, Round 2 - The Exploit We contemplated releasing this exploit and decided to do it. Here Is Why. We are a full disclosure security team, and we were not working under any non disclosure agreements with...

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode (1)

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode 1 // source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffe...

Ethereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (1)

// source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS request and queries. However, d...

Ethereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (2)

source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS request and queries. However, due ...

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode (2)

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode 2 source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers...

CVE-1999-0598

A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection...

CVE-1999-0601

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

CVE-1999-0600

A network intrusion detection system IDS does not verify the checksum on a packet...

CVE-1999-0599

A network intrusion detection system IDS does not properly handle packets with improper sequence numbers...

CVE-1999-0602

A network intrusion detection system IDS does not properly reassemble fragmented packets...

PT-1999-1217 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS fails to properly handle packets that contain improper sequence numbers. Recommendations: At the moment, there is no information about a new...

PT-1999-1218 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS fails to verify the checksum on a packet. This issue may allow unauthorized access or malicious activity to go undetected. Recommendations: ...

PT-1999-1220 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly reassemble fragmented packets. This issue may lead to potential security risks, but specific details about affected device...

PT-1999-1216 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection. Recommendations: At the moment, there...

PT-1999-1219 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle data within TCP handshake packets. Recommendations: At the moment, there is no information about a newer version th...