1666 matches found
CVE-2002-0276
CVE-2002-0276 describes a buffer overflow in various decoders of Ettercap ≤ 0.6.3.1 when running on networks with MTU > 2000, allowing remote attackers to execute arbitrary code via large packets. The entry specifies the affected software (Ettercap) and version range, the root cause (buffer ov...
CVE-2003-0001
Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak...
CVE-2002-0452
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...
Weak encryption in SunPCi II VNC
Password is DES encoded with random key generated by server and moved over the wire...
ZyXEL ZyWALL10 DoS
vendor status About half a year ago I found a 'funny' DoS condition in the ZyWALL10. ZyXEL was informed, and they at least confirmed the bug, but i believe that's all i heard. According to www.zyxel.com a new firmware for the ZyWALL10 was released 2002/01/10 - i wrote an email to a ZyXEL employee...
CVE-2001-0461
CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...
XTux Server 2001.0 6.01 - Garbage Denial of Service
XTux Server 2001.0 6.01 - Garbage Denial of Service source: https://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected...
IPRoute Fragmentation Denial of Service Vulnerability
IPRoute Fragmentation Denial of Service Vulnerability by Chris Gragsone and The TechnoDragon Foot Clan Date: December 2, 2001 Advisory ID: Foot-20011202 Impact of vulnerability: Denial of Service Exploitable: Remotely Maximum Risk: Moderate Affected Software: IPRoute v1.18 IPRoute v0.974 IPRoute...
OSX remote root
I have seen mention of nidump being used local to an OSX box to take root... I have found that with the use of "tags" it is also a remote root. I have not notified apple due to the fact that they did nothing about the original local exploit. Any machine with a "network" nidomain is vulnerable. It...
Microsoft Windows 98 - ARP Denial of Service
Microsoft Windows 98 - ARP Denial of Service source: https://www.securityfocus.com/bid/3113/info A potential denial of service vulnerability exists in some versions of the Microsoft Windows network stack. The problem occurs when a large number of extraneous ARP packets sent to a host running...
ISSalert: ISS Advisory: Wired-side SNMP key exposure in 802.11b Access Points
Internet Security Systems Security Advisory June 20, 2001 Wired-side SNMP WEP key exposure in 802.11b Access Points Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in several 802.11b Access Point devices. This problem may reveal the Wired Equivalent Privacy WEP key...
Cisco IOS HTTP Server ?/ String Local DoS
It was possible to make the remote switch reboot by requesting : GET /cgi-bin/view-source?/ A remote attacker may use this flaw to prevent your network from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
FreeBSD-SA-01:08.ipfw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...
TopLayer layer 7 switch Advisory
Hi, I have been testing the TopLayer 2500 layer 7 switch, which can be found at www.toplayer.com. From what I was testing so far the switch looked to do great things. It even suppose to have security features to prevent DoS from icmp to other IP based filtering. I decided to do a little more...
ISS.txt
ISS products are meant to be used in a defensive role. Here we will look at using them in an offensive role. ===Please note that the writer has NO responsibility for YOUR actions with this === ===information! I did not make you do it. I just made you aware it COULD be done.=== Internet Scanner an...
linux-masq-udp.txt
Security Problems with Linux 2.2.x IP Masquerading Summary: Due to lax checking in the masquerading kernel code, an attacker is able to rewrite a linux masq gateway's UDP masquerading entries so that the remote host and port are whatever they choose. This creates a tunnel between whatever host an...
Nortel Networks Nautica Marlin - Denial of Service
Nortel Networks Nautica Marlin - Denial of Service source: https://www.securityfocus.com/bid/1009/info A vulnerability exists in the Nortel/Bay Networks Nautica Marlin router pruduct. Sending a 0 byte UDP packet to port 161 SNMP to one of these routers will cause it to crash. This attack can be...
ISC BIND 4.9.7/8.x - Traffic Amplification and NS Route Discovery
source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists in the default configuration of many popular DNS servers. If a...
CVE-1999-0517
CVE-1999-0517 identifies an SNMP flaw where the community string is default (public), null, or missing. This enables remote SNMP access to the device, with potential exposure of SNMP data and management actions. The vulnerability is reflected across various advisories and scanners (including F5 B...