Cisco Bug

Hello, I found what I think is an undocumented bug of at least the cisco 760 series, I tried to report it to cisco but they are always busy and english is one of my weak points. The bug: When you open about 98 connections to the port 23 of a Cisco 760 router it does a self reboot disconnecting it...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

CVE-2000-0268

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot...

CVE-2000-0222

CVE-2000-0222 concerns Windows 2000: the installer does not activate the Administrator password until reboot, enabling remote access to the ADMIN$ share without a password until that reboot occurs. OpenVAS-derived content references this CVE in a script-cve list and highlights a broader SMB conte...

Be BeOS 4.55.0 - Invalid System Call

Be BeOS 4.55.0 - Invalid System Call source: https://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...

Bray Systems Linux Trustees 1.5 - Long Pathname

Bray Systems Linux Trustees 1.5 - Long Pathname // source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the...

Bray Systems Linux Trustees 1.5 - Long Pathname

// source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the application to hang. Other processes may also be...

Be BeOS 4.5/5.0 - Invalid System Call

source: https://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...

CVE-2000-0222

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service source: https://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up al...

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service

source: https://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up all available CPU resource, or to stop the post office service. The server wi...

CVE-1999-0459

CVE-1999-0459 affects Alpha Linux where local users can trigger a denial-of-service by using MILO to force a reboot. The available connected documents identify Alpha Linux and MILO as the components involved, and describe the impact as a local DoS resulting in a system reboot. There is no explici...

CVE-1999-0222

The CVE-1999-0222 entry concerns Cisco IOS web server denial of service, where a attacker-supplied long URL can cause the router to reboot. Affected software is Cisco IOS web server (Cisco IOS), with the vulnerability described as a DoS via a long URL that leads to a reboot. The connected Red Hat...

CVE-1999-0549

The CVE-1999-0549 entry pertains to Windows NT, where the system automatically logs in an administrator upon reboot. Affected software: Windows NT. Vulnerability: administrative login occurs without user authentication at boot. Root cause and exact exploit vector are not detailed in the provided ...

CVE-1999-0222

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL...

Novell BorderManager 3.0/3.5 Audit Trail Proxy - Denial of Service

source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and external interfaces. If a connection is made to this port and the 'enter...

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If...

nav2000.dos.txt

Hello, I just found somewhat of a problem in Symantec's Email protection in NAV2000. The Protection program leaves a pop server running on the local workstation NAV2000 is installed on.. This server can be crashed somewhat like this telnet 1.1.1.1 USER over 1200 char Then, GPF in windows98 POPROX...

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (2)

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 2 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...

CVE-1999-0355

CVE-1999-0355 affects ControlIT 4.5, where local or remote users can force a reboot or log out, causing a denial of service. The PT-1999-1044 entry confirms affected software and the DoS behavior but does not provide a fix or patched version in the supplied materials. No exploitation details or i...