6672 matches found
5861 IP Filtering issues
Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP SYN flags, a simple port scan to the WAN interface of the route...
XSS vulnerabilites in Pafiledb
INTRO Some of you may be familiar with Pafiledb provided by PHP arena. Well they just released a new version that fixed a problem with their counting of files. Along with that they said they fixed a possible security bug involving using Javascript as a search string. I checked it on my old versio...
CVE-2001-1388
CVE-2001-1388 affects iptables prior to 1.2.4. The vulnerability stems from an inaccuracy in converting rate limits specified on the command line, which could cause administrators to see mismatched traffic levels (more or less) than intended. The articles do not provide exploit details or confirm...
CVE-2001-1388
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...
CVE-2001-1388: Allocation of Resources Without Limits or Throttling
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...
PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...
CVE-2001-1388
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...
PT-2000-1165 · Oracle · Iplanet Web Server
Name of the Vulnerable Software and Affected Versions: iPlanet Web Server version 4.1 Description: The issue allows remote attackers to cause a denial of service by sending a large number of GET commands, which consumes memory and causes a kernel panic. Recommendations: For iPlanet Web Server...
spank.txt
------------------------------------------------ Explanation of the 'spank' attack -- a new breed stream/raped ------------------------------------------------ By: lst [email protected] This is a tad different than the previous release. Stream/Raped mearly flooded the host with ack's or no flags a...
PT-1999-1399 · Alt N · Mdaemon
Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...