Denial of Service in Lotus Domino 5.08 and earlier HTTP Server

There exists a DOS in the current version of Lotus Domino 5.08 and earlier. The DOS manifests itself on Lotus Domino servers with the http task running and ssl enabled. A connection to the victim on port 443 with the nmap '-sR' switch will target this port with SunRPC program NULL commands in an...

Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution

-- Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution -- Problem discovered: 16/11/2001 by Cabezon Aurйlien | [email protected] http://www.isecurelabs.com/article.php?sid=209 -- Description -- This Phpnuke addon includes web frontends for the following nix...

BinTec X4000 Access Router DoS Vulnerability

BinTec X4000 locks up after nmap -sS portscan The BinTec X4000 is a mid-sized multi-purpose, multi-protocol router meant to fit the needs of small to medium companies. Unfortunately, it has a bit of a problem. A simple nmap SYN scan nmap -sS will cause the machine to lock up completely. It can...

Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

Possible DoS against inetd in Solaris

Hi, I stumbled upon something that looks like a bug in inetd on Solaris. If a Solaris box is portscaned by nmap with -T Insane option very quick scan daemons that are started by inetd stop responding. That is you can connect to them, connection get accepted, by they don't display any banner or...

DoS против inetd в Solaris

При сканировании nmap -T выпадают все сервисы запущенные через inetd...

Nmap Protocol Scanning DoS against OpenBSD IPSEC

The protocol scanning option -sO in 2.54 Beta releases of nmap results in a remote denial of service against OpenBSD 2.7's IPSEC implementation due to its inability to handle tiny AH/ESP packets. Nmap protocol scans repeatedly cycle through IP protocol version numbers, attempting to elicit ICMP...

Snort 1.6 and nmap 2.54beta1

I don't know if this has been reported before but here it goes. snort 1.6 crashes when it's "hit" by a nmap protocol scan nmap -sO; It failes to write some packets to a file and ends whit a fopen error. I woud appriciate if someone can reproduce this. Sorry for my bad English...

Linux news 11.05.00

nmap 2.53 Вышла новая версия утилиты, предназначенной для сканирования сетей и отдельных хостов - nmap. Подробнее: http://www.appwatch.com/Linux/Library/81/view.html Red Hat создала инвестиционное подразделение для финансирования молодых компаний Компания Red Hat объявила о создании нового...

Re: DOS attack against HP JetDirect Printers (fwd)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've never seen nmap dos a HP4000 printer but they do die if you toss junk at the spooler port. The printer display says 86.00x EIO 1 Error, and the red attention light goes on. At this point you have to power the printer back on and off. The rev's ar...

Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service

source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS...

Nortel Networks Nautica Marlin - Denial of Service

source: https://www.securityfocus.com/bid/1009/info A vulnerability exists in the Nortel/Bay Networks Nautica Marlin router pruduct. Sending a 0 byte UDP packet to port 161 SNMP to one of these routers will cause it to crash. This attack can be trivially performed using NMAP or other UDP port...

CVE-1999-0454

A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso...

CVE-1999-0454

Technical details (affected products/versions, root cause, and fixes) are not publicly available in the provided documents. Monitor Red Hat, NVD, and other sources for concrete remediation or disclosure updates.

Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)

source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the server listening on that port is then...

Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)

Solaris 7.0 - Recursive mutexenter Remote Panic Denial of Service source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an...

cisco_and_nmap_dos.txt

Subject: Re: Cisco and Nmap Dos To: [email protected] Hi all, I wanted to address the items listed here. We are still investigating this problem, and hope to have more information later on in the week. Item 1, OSPF is not an issue. According to the configuration information provided to us...

nmap.txt

Subject: Re: CERT Summary CS-99-03 To: [email protected] From the CERT Summary released yesterday: 1. RPC Vulnerabilities We have received many reports of exploitations involving three RPC vulnerabilties. Such exploitations can lead to root compromise on systems that implement these RPC...

rpc_vulnerability.txt

Subject: Auditing for RPC vulnerabilities? Use BASS To: [email protected] On Wed, Sep 01, 1999 at 09:44:26PM -0400, Fyodor wrote: Further, it can be painful to locate and 'rpcinfo' every host on a large network. BASS includes RPC support, and was designed with bulk in mind It was develope...