ipsec -- reply attack vulnerability

Problem Description IPsec provides an anti-replay service which when enabled prevents an attacker from successfully executing a replay attack. This is done through the verification of sequence numbers. A programming error in the fastipsec4 implementation results in the sequence number associated...

[SA19137] nCipher Products Multiple Vulnerabilities

TITLE: nCipher Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19137 VERIFY ADVISORY: http://secunia.com/advisories/19137/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: nCipher payShield http://secunia.com/product/2831/ nCipher nShield...

[NT] Internet Explorer 7.0 Beta 2 urlmon.dll Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

IP Protocols Scan

This plugin detects the protocols understood by the remote IP stack. The routine might take good amount of time to complete so it is not enabled by default. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

[SECURITY] [DSA 873-1] New net-snmp packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 873-1 [email protected] http://www.debian.org/security/ Martin Schulze October 26th, 2005 http://www.debian.org/security/faq -...

Multiple Microsoft Distributed Transaction Controller DoS conditions

Problems with TIP protocols handling, bounce attack is possible...

openssl, openssl095a, openssl096 security update

CentOS Errata and Security Advisory CESA-2005:800-01 Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v...

net security update

CentOS Errata and Security Advisory CESA-2005:395 Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used f...

RHEL 4 : wget (RHSA-2005:771)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...

Mandrake Linux Security Advisory : ucd-snmp (MDKSA-2005:137)

A Denial of Service vulnerability was discovered in the way that ucd-snmp uses network stream protocols. A remote attacker could send a ucd-snmp agent a specially crafted packet that would cause the agent to crash. The updated packages have been patched to correct this problem. %NASLMINLEVEL 7030...

wget security update

CentOS Errata and Security Advisory CESA-2005:771-01 Updated wget package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

pwnzilla.txt

/ SSSSSSS, SSSSSSS' PwnZilla 5 - One sploit fits all. FireFox optimized iSY iS; .sS Exploit for IDN host name heap buffer overrun in .SSSSSSS .sS Mozilla browsers FireFox, Mozilla and Netscape iS; .sS Copyright C 2003-2005 by Berend-Jan Wever. .SS sSSSSSSP Official release:...

Mozilla / Mozilla Firefox authentication weakness

Dear bugTraq, I have reported this issue some time ago: http://www.security.nnov.ru/Fnews19.html but it looks like it was ignored, and not fixed in latest mozilla and firefox releases, so I decided to send "formal" advisory Issue: Mozilla browsers authentication weakness Author: 3APA3A...

[Full-disclosure] Mozilla Firefox "Host:" Buffer Overflow

Mozilla Firefox "Host:" Buffer Overflow Release Date: September 8, 2005 Date Reported: September 4, 2005 Severity: Critical Vendor: Mozilla Versions Affected: Firefox Win32 1.0.6 and prior Firefox Linux 1.0.6 and prior Firefox 1.5 Beta 1 Deer Park Alpha 2 Overview: A buffer overflow vulnerability...

Gaim AIMICQ Protocols - Multiple Vulnerabilities

Gaim AIMICQ Protocols - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions ...

RHEL 2.1 : ucd-snmp (RHSA-2005:720)

Updated ucd-snmp packages that a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of servic...

MS Windows XP SP2 (rdpwd.sys) Remote Kernel DoS Exploit

Exploit for unknown platform in category dos / poc ======================================================= MS Windows XP SP2 rdpwd.sys Remote Kernel DoS Exploit ======================================================= // get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0...

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...

CVE-2000-1226

Snort 1.6 is affected. In straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging, remote attackers can cause a denial of service (crash) by sending non-IP protocols that Snort cannot recognize, as demonstrated by an nmap protocol scan. This vulnerability is docu...

Multiple tcpdump / ethereal sniffers vulnerabilities

Endless loops during handling RSVP, ISIS, BGP, LDP protocols, buffer overflows in ANSI A, GSM MAP, AIM, DISTCC, FCELS, SIP, KINK, LMP, Telnet, TZSP, WSP, BER, SMB, H.245, Bittorrent, Fibre Channel and many others...