Multiple vulnerabilities in Macromedia Flash ActiveX

Author: LOM lom at lom.spb.ru Product: Macromedia Flash ActiveX 6.0 6,0,47,0 Vendor: Macromedia was not contacted Risk: High Remote: Yes Exploitable: Yes Into: Macromedia flash ActiveX plugin displays .swf files under Internet Explorer. Vulnerabilities: Few vulnerabilities were identified:...

CVE-2002-0957

The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service memory consumption via a large number of connections to the BlackICE system that consumes more resources than intended by the user...

security flaw

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

CVE-2002-0886

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service hang or memory consumption via 1 a large packet to the DHCP port, 2 a large packet to the Telnet port, or 3 a flood of large packets to the CPE, which causes the TCP/IP stack to consume large...

CVE-2002-0957

The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service memory consumption via a large number of connections to the BlackICE system that consumes more resources than intended by the user...

Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks

Date: August 3, 2002 Author: Stan Bubrouski Product: 602Pro LAN SUITE 2002 Version: 2002 Vendor: Software602, Inc. Summary: Denial of Service attacks in webserver and telnet proxy Description: There are two denial of service attacks in 602Pro LAN SUITE 2002 for windows. The problems are described...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) is affected. A remote attacker can cause memory exhaustion and a denial of service by flooding CDP neighbor announcements. Impact is memory consumption on affected devices; no public exploit details are provided in the sources. Rem...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

CVE-2002-0404

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

PT-2002-1458 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.9.3 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, by exploiting a vulnerability in the GIOP dissector. Recommendations: For versions prior to 0.9.3,...

Cisco CBOS 2.x - Broadband Operating System TCP/IP Stack Denial of Service

source: https://www.securityfocus.com/bid/4815/info Cisco Broadband Operating System CBOS is the operating system used on Cisco 600 series routers. When the CBOS TCP/IP stack is forced to process a high number of unusually large packets, it will consume all memory. This will cause the router to...

Cisco IOS ICMP redirect DoS - Cisco's response

-----BEGIN PGP SIGNED MESSAGE----- Hello, We can confirm the finding made by [email protected]. This issue is assigned Cisco bug ID CSCdx32056. The fix has been developed and it is being committed into all affected releases. The situation in Cisco IOS 12.x code is that the redirect cache will only...

DOS for Icq 2001&2002

Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...

Microsoft Windows Universal Plug and Play service (UPNP) fails to limit the data returned in response to a NOTIFY message

Overview Microsoft Windows Universal Plug and Play UPnP is vulnerable to a denial-of-service attack that could negatively affect the performance of vulnerable machines. Description Universal Plug and Play UPnP is a system designed to allow network devices to operate together. One of the UPnP...

Oracle Database Server vulnerable to DoS via repeated requests to Oracle listener without connecting to redirected port

Overview Oracle Database Server may consume all available memory and crash if clients do not connect completely in the expected manner. Description When a connection request is made to Oracle for Windows NT, Oracle Database Server creates a new thread listening on a new port and redirects the...

Cisco Systems - Vulnerability in CDP

-----BEGIN PGP SIGNED MESSAGE----- This is not a Cisco security advisory. There is a vulnerability in how Cisco routers are handling CDP. By sending a large amount of CDP neighbor announcements it is possible to consume all available router's memory. That will cause a crash or some other abnormal...

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...

CVE-2000-0897

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed...

Lotus Domino vulnerable to DoS via many large connects sent to 63148/TCP

Overview The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial of service. Description A continuous stream of "connect" requests with a payload of 10K of data to TCP port 63148 DIIOP - CORBA will result in 100% CPU usage, the hard disk constantly being written to,...

ISSalert: ISS Advisory: Oracle Redirect Denial of Service

Internet Security Systems Security Advisory June 19, 2001 Oracle Redirect Denial of Service Synopsis: Internet Security Systems ISS X-Force has identified a vulnerability with redirected Oracle connections. This vulnerability allows an unauthenticated user to consume all the memory on an Oracle...