FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...

TopLayer layer 7 switch Advisory

Hi, I have been testing the TopLayer 2500 layer 7 switch, which can be found at www.toplayer.com. From what I was testing so far the switch looked to do great things. It even suppose to have security features to prevent DoS from icmp to other IP based filtering. I decided to do a little more...

ISS.txt

ISS products are meant to be used in a defensive role. Here we will look at using them in an offensive role. ===Please note that the writer has NO responsibility for YOUR actions with this === ===information! I did not make you do it. I just made you aware it COULD be done.=== Internet Scanner an...

linux-masq-udp.txt

Security Problems with Linux 2.2.x IP Masquerading Summary: Due to lax checking in the masquerading kernel code, an attacker is able to rewrite a linux masq gateway's UDP masquerading entries so that the remote host and port are whatever they choose. This creates a tunnel between whatever host an...

Nortel Networks Nautica Marlin - Denial of Service

Nortel Networks Nautica Marlin - Denial of Service source: https://www.securityfocus.com/bid/1009/info A vulnerability exists in the Nortel/Bay Networks Nautica Marlin router pruduct. Sending a 0 byte UDP packet to port 161 SNMP to one of these routers will cause it to crash. This attack can be...

ISC BIND 4.9.7/8.x - Traffic Amplification and NS Route Discovery

source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists in the default configuration of many popular DNS servers. If a...

CVE-1999-0517

CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network...

webramp-M3-entre.txt

Date: Thu, 21 Jan 1999 15:20:56 -0500 From: James Egelhof To: [email protected] Subject: Re: WebRamp M3 remote network access bug On Thu, 21 Jan 1999, John Stanley wrote: If you are using this box, and you see this bug, and you have NOT changed the admin password from the default, DO SO...

livingston-PM3-DoS.txt

Date: Wed, 13 Jan 1999 10:13:55 +0100 From: David TILLOY To: [email protected] Subject: PM PM3s Die - Comfirmed DoS Attack fwd This is a message from Livingston PM3 users mailing-list. It seems there is a problem with PM3, and Lucent work on this bug. At this time, the solution is give a the e...

Ascend MAX / Pipeline Router Discard Port Malformed Packet DoS

It was possible to make the remote Ascend router reboot by sending it a UDP packet containg special data on port 9 discard. An attacker may use this flaw to make your router crash continuously, preventing your network from working properly. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

CVE-2009-3773

...

Security Update for Microsoft Windows (KB824105)

A security issue has been identified in Microsoft Windows that could allow an attacker to see information in your computer’s memory over a network. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...