CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

External Scanner Service Identification

This plugin registers services that were identified by external scanners amap, nmap, etc.... It does not perform any fingerprinting by itself. C Tenable Network Security, Inc. We could do this job in amap.nasl or nmap.nasl, but as those plugins must be signed to be "trusted", we don't want to...

GLSA-200401-02 : Honeyd remote detection vulnerability via a probe packet

The remote host is affected by the vulnerability described in GLSA-200401-02 Honeyd remote detection vulnerability via a probe packet A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP...

Speedtouch 510 DOS

Speedtouch 510 ADSL Modem/FW/Router We have been attempting to run NMAP and NESSUS scans using a new ADSL cable link. Using the ADSL modem mentioned above, we found that a standard NMAP/NESSUS scan of an IP range would force the router to reboot itself after 20 seconds. Thinking this was faulty...

5861 IP Filtering issues

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP SYN flags, a simple port scan to the WAN interface of the route...

CVE-2002-2071

Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in 1 telnet, 2 FTP, 3 ypbind, 4 rpc.lockd, 5 snmp, 6 ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap...

CVE-2002-2179

The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service crash via a TCP port scan using a tool such as nmap...

CVE-2002-1322

CVE-2002-1322 affects Rational ClearCase 4.1 and 2002.05 (and possibly other versions) and allows remote attackers to cause a denial of service (crash) by sending certain packets to TCP/UDP port 371 (e.g., via nmap). The underlying details specify a network-based DoS vector to a specific service ...

Rational ClearCase 4.1 - Portscan Denial of Service

source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase. This issue was demonstrated using the nmap portscanni...

Rational ClearCase 4.1 - Portscan Denial of Service

Rational ClearCase 4.1 - Portscan Denial of Service source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase...

Alcatel Operating System (AOS) does not require a password for accessing the telnet server

Overview The OmniSwitch 7700/7800 running Alcatel Operating System AOS version 5.1.1 has TCP port 6778 listening as a telnet server. This gives anyone access to the OmniSwitch's Vx-Works operating system without requiring a password. Description During an NMAP audit of the AOS 5.1.1 code that run...

Buffalo AP Denial of Service

Arhont Ltd. - Information Security Arhont Advisory by: Andrei Mikhailovsky www.arhont.com Advisory: Buffalo AP AP Model Name: WLA-L11G Ver.2.31 Wireless Firmware: WLI-PCM-L11G Ver.6.14 Model Specific: Other versions of Buffalo APs might be vulnerable Manufacturer site: http://www.buffalotech.com...

Motorola Cable Modem DOS

I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...

CISCO as5350 crashes with nmap connect scan

I have managed to "reduplicate" at least five times the following scenario with a cisco as5250, with firmwrare 12.2 11t release firmware of cisco: nmap -dinsane -p 1-65535 ip.of.as5350 This causes a "hard" lockup, and the device must be powered off in order to have functionality restored to it...

Cisco AS5350 DoS

nmap -dinsane -p 1-65535 ip.of.as5350 causes router to hang...

Kill a Unisys Clearpath with nmap port scan

Unisys "Clearpath" mainframes are very sensitive to the probes of nmap and similar programs. Basically, by only port-scanning not even fingerprinting, you can cause the entire machine to seize up. Yes, the whole machine...not just a job or the TCP/IP device. The problem may be occurring because t...

Enterasys SSR8000 DoS

nmap scanning causes system to crash...

LG LR3100p 1.30 Series Router - IP Packet Flags Denial of Service

source: https://www.securityfocus.com/bid/5550/info The LR series WAN routers are hardware and firmware solutions manufactured and distributed by LG Electronics. It has been reported that scanning some LG routers using various IP flags can cause the router to become unstable. When the router is...

CVE-2002-0116

CVE-2002-0116 describes a denial-of-service in Palm OS 3.5h and possibly earlier versions used in Handspring Visor and Xircom devices. A remote attacker can trigger the DoS via a TCP connect scan (e.g., using nmap) over the network. The connected documents do not provide vendor-specific patch ver...

CVE-2002-0119

The CVE-2002-0119 entry concerns the Alcatel Speed Touch Home ADSL Modem. The vulnerability is triggered by remote network scanning using unusual packets (e.g., Nmap with OS detection), which leads to a denial of service (reboot). The NVD entry lists a network-based attack vector with low complex...