DoS против PCAnywhere (connection flood)

Большое число запросов на соединение приводит к отказу в обслуживании...

scx-sa-14.txt

============================================================================= Securax-SA-14 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Symantec pcAnywhere 9.0 DoS / Buffer Overflow Announced: 2001-02-08...

Дырка в pcAnywhere (buffer overflow)

Переполнение буфера при большом числе определенных символов в порт TCP/65301...

Symantec pcAnywhere 9.0 DoS / Buffer Overflow

============================================================================= Securax-SA-14 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Symantec pcAnywhere 9.0 DoS / Buffer Overflow Announced: 2001-02-08...

CVE-2000-0273

PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...

CVE-2000-0273

Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0273: Undefined Security Weakness

PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...

CVE-2000-0300

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

CVE-2000-0300: Undefined Security Weakness

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts...

CVE-2000-0324

pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap...

Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 - Port Scan Denial of Service

source: https://www.securityfocus.com/bid/1150/info Performing a TCP SYN or TCP connect scan on a host running Symantec pcAnywhere will cause the program to crash. Restarting the application is required in order to regain normal functionality. nmap -sS target...

Symantec pcAnywhere 8.0.18.0.29.09.2 - Port Scan Denial of Service

Symantec pcAnywhere 8.0.18.0.29.09.2 - Port Scan Denial of Service source: https://www.securityfocus.com/bid/1150/info Performing a TCP SYN or TCP connect scan on a host running Symantec pcAnywhere will cause the program to crash. Restarting the application is required in order to regain normal...

DoS против pcAnywhere

Завершение клиентского сеанса до авторизации приводит к краху сервиса...

Re: A funny way to DOS pcANYWHERE8.0 and 9.0

I also found on PCAnywhere version 8.0, if you accidently terminate a session e.g. unplug your network cable from your PC, get dropped from a dialup network connection, etc. that you hang up web, ftp, telnet, indexing, PCAnywhere and several other services on the host PC. The easiest way to recov...

A funny way to DOS pcANYWHERE8.0 and 9.0

i found a funny thing about pcANYWHERE. when we use pcANYWHERE remote control client to connect the host running pcANYWHERE, at first the statu bar appears "pcANYWHERE connecting..." ,then the login window will appear; but if we press "Cancel" before the login window appears, the pcANYWHERE servi...

CVE-2000-0273

PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...

PcAnywhere weak password encryption

PcAnywhere weak password encryption ---- Discussion ---- PcAnywhere 9.0.0 set to its default security value uses a trivial encryption method so user names and password are not sent directly in clear. Since most users have the encryption methods set to either "none" or "PcAnyWhere", their password...

CVE-2000-0300

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts...

Symantec pcAnywhere 9.0 - Weak Encryption

Symantec pcAnywhere 9.0 - Weak Encryption // source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing...