Cisco IOS and CatOS fail to properly validate ARP packets thereby overwriting device's MAC address in ARP table

Overview There is a denial-of-service vulnerability in specific versions of Cisco IOS or CatOS. Description A denial-of-service vulnerability exists in specific versions of Cisco IOS or CatOS. This vulnerability can cause the device to crash or become unavailable if specially crafted arp packets...

Обход защиты в Zone Alarm (protection bypass)

Все адреса из сети /16 считаются локальными...

MiM Simultaneous close attack

Доброе время суток Учёный Кот! Глядя на убогий эксплоит mimsc.exe решили написать нечто похожее, коментарий одного из автора проекта: ---------------------------------------------------------------------------------------------- Данный эксплоит написан в поддержку security advisory MiM Simultaneo...

Дырка в eTrust Access Control (SeOS)

Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...

isc-dhcpd.exploit.txt

Somebody at OpenBSD discovered a possible root exploit in the ISC DHCP client. I can confirm that as of 6:23am on June 23rd after several hours of hacking around the sources I had the following dhcpd config running on my own machine's private network for testing: shared-network LOCAL-NET option...

Stake AntiSniff 1.0.1Researchers 1.0 - DNS Overflow (3)

Stake AntiSniff 1.0.1Researchers 1.0 - DNS Overflow 3 // source: https://www.securityfocus.com/bid/1207/info Certain versions of @Stake Inc.'s Antisniffer software contain a remotely exploitable buffer overflow. AntiSniff is a program that was released by L0pht Heavy Industries in July of 1999. I...

AVM KEN! ISDN Proxy Server Malformed Request Remote DoS

It was possible to crash the remote service - very likely Ken! ISDN Proxy Software - by sending it a non-HTTP request. Note that in the case of the Ken!, exploitation requires that the attacker be on the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...

Wietse Venema Rpcbind Replacement 2.1 - Denial of Service

Wietse Venema Rpcbind Replacement 2.1 - Denial of Service source: https://www.securityfocus.com/bid/1893/info A remote root vulnerability exists in certain versions of rpcbind portmapper. RPC Remote Procedure Call allows a program to request a service from a program located in another computer in...