Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

Possible DoS against inetd in Solaris

Hi, I stumbled upon something that looks like a bug in inetd on Solaris. If a Solaris box is portscaned by nmap with -T Insane option very quick scan daemons that are started by inetd stop responding. That is you can connect to them, connection get accepted, by they don't display any banner or...

DoS против inetd в Solaris

При сканировании nmap -T выпадают все сервисы запущенные через inetd...

Nmap Protocol Scanning DoS against OpenBSD IPSEC

The protocol scanning option -sO in 2.54 Beta releases of nmap results in a remote denial of service against OpenBSD 2.7's IPSEC implementation due to its inability to handle tiny AH/ESP packets. Nmap protocol scans repeatedly cycle through IP protocol version numbers, attempting to elicit ICMP...

Snort 1.6 and nmap 2.54beta1

I don't know if this has been reported before but here it goes. snort 1.6 crashes when it's "hit" by a nmap protocol scan nmap -sO; It failes to write some packets to a file and ends whit a fopen error. I woud appriciate if someone can reproduce this. Sorry for my bad English...

Linux news 11.05.00

nmap 2.53 Вышла новая версия утилиты, предназначенной для сканирования сетей и отдельных хостов - nmap. Подробнее: http://www.appwatch.com/Linux/Library/81/view.html Red Hat создала инвестиционное подразделение для финансирования молодых компаний Компания Red Hat объявила о создании нового...

Re: DOS attack against HP JetDirect Printers (fwd)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've never seen nmap dos a HP4000 printer but they do die if you toss junk at the spooler port. The printer display says 86.00x EIO 1 Error, and the red attention light goes on. At this point you have to power the printer back on and off. The rev's ar...

Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service

source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service

Data General DGUX 5.4 - inetd Service Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS...

Nortel Networks Nautica Marlin - Denial of Service

source: https://www.securityfocus.com/bid/1009/info A vulnerability exists in the Nortel/Bay Networks Nautica Marlin router pruduct. Sending a 0 byte UDP packet to port 161 SNMP to one of these routers will cause it to crash. This attack can be trivially performed using NMAP or other UDP port...

CVE-1999-0454

A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso...

CVE-1999-0454

Technical details (affected products/versions, root cause, and fixes) are not publicly available in the provided documents. Monitor Red Hat, NVD, and other sources for concrete remediation or disclosure updates.

Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)

source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the server listening on that port is then...

Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)

Solaris 7.0 - Recursive mutexenter Remote Panic Denial of Service source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an...

nmap.txt

Subject: Re: CERT Summary CS-99-03 To: [email protected] From the CERT Summary released yesterday: 1. RPC Vulnerabilities We have received many reports of exploitations involving three RPC vulnerabilties. Such exploitations can lead to root compromise on systems that implement these RPC...

cisco_and_nmap_dos.txt

Subject: Re: Cisco and Nmap Dos To: [email protected] Hi all, I wanted to address the items listed here. We are still investigating this problem, and hope to have more information later on in the week. Item 1, OSPF is not an issue. According to the configuration information provided to us...

rpc_vulnerability.txt

Subject: Auditing for RPC vulnerabilities? Use BASS To: [email protected] On Wed, Sep 01, 1999 at 09:44:26PM -0400, Fyodor wrote: Further, it can be painful to locate and 'rpcinfo' every host on a large network. BASS includes RPC support, and was designed with bulk in mind It was develope...

nmap-DoS-2.txt

Date: Wed, 23 Dec 1998 09:31:23 -0500 From: Richard Reiner Reply-To: Bugtraq List To: [email protected] Subject: SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability can crash systems or disable critical...

nmap-MS-winnt-telnetd.txt

Date: Sat, 2 Jan 1999 09:39:08 +0100 From: Tomas Halgas To: [email protected] Subject: nmap can crash microsoft telnetd Nmap 2.01++ can crash microsoft winnt telnetd. Only need to have option -sS enabled when scanning... You will get a aplication popup with message like this - program made an...

smurf.BIP-hunting-nmap.txt

Date: Thu, 31 Dec 1998 15:22:14 -0500 From: Fyodor To: [email protected] Subject: Re: netscan.org - broadcast ICMP list http://netscan.org has the first relatively complete database of ICMP directed broadcast networks "smurf amplifiers". All allocated IP addresses ending in .0 or .255 have bee...