Important: Red Hat Security Advisory: xinetd security update

Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...

DEBIAN-CVE-2002-1391

Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument...

ProFTPd 1.2.x - 'STAT' Denial of Service

source: https://www.securityfocus.com/bid/6341/info A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will result in a denial of service condition...

CERT Advisory CA-2002-31 Multiple Vulnerabilities in BIND

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-31 Multiple Vulnerabilities in BIND Original release date: November 14, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running various versions of BIND 4 and...

Microsoft Windows 2000 vulnerable to DoS via malformed packets sent to port 445/tcp

Overview The default configuration of Microsoft Windows 2000 does not properly handle malformed packets received on TCP port 445. As a result, Windows may cease to function normally upon receipt of malformed packets on this port. Description Microsoft LAN Manager LANMAN is enabled by default on...

DoS против Arescom NetDSL

Несколько длинных строк в порт телнет приводит к отказу сервиса...

DoS против IRIX с помощью IGMP

Неправильный IGMP-пакет приводит к отказу в обслуживании...

DoS против PCAnywhere (connection flood)

Большое число запросов на соединение приводит к отказу в обслуживании...

DoS против XFree-xfs

Большое количество случайных данных в порт приложения приводит к отказу в обслуживнаии...

GoAhead Web Server 2.1 (Windows) - Denial of Service

GoAhead Web Server 2.1 Windows - Denial of Service source: https://www.securityfocus.com/bid/2607/info The GoAhead Web Server is a freely available, open source software package developed by GoAhead. The GoAhead Web Server offers a multi-platform web server and source code to the community. A...

DoS против BinTec X4000 (SYN scan)

SYN-Пакет в порт 1723 pptp вызывает отказ в обслуживании...

DoS против NetBIOS/TCP/IP - NBT flood

Постоянная отправка намеренно поврежденных пакетов приводит к отказу в обслуживании NetBIOS - клиентов...

Evolvable Shambala Server 4.5 - Denial of Service

Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...

[COVERT-2000-09] Windows NetBIOS Name Conflicts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 27, 2000 Windows NetBIOS Name Conflicts COVERT-2000-09 o Synopsis The Microsoft Windows implementation of NetBIOS allows an unsolicited UDP datagram to remotely deny access to services offere...

DoS против telnet в Windows 2000

Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...

HP JetAdmin 6.0 - Printing Denial of Service

source: https://www.securityfocus.com/bid/1246/info By default JetAdmin Web Interface Server listens on port 8000. If a malformed URL request is sent to port 8000 this will cause the server services to stop responding. The service must be stopped and restarted to regain normal functionality...

Remote Dos attack against Intel express 8100 router

Remote Dos attack against Intel express 8100 router --------------------------------------------------- Intel express 8100 isdn router vulnerable for remote icmp fragmented packets and oversize packets. exploit demonstrate as follows.. Download libnet and isic-0.05 test following exploit. And do...

Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service

source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's services. Restarting the application or waiting until the URL is...

Заткнута очередная дырка в IIS

Используя строку с большим количеством ESC-символов xx можно существенно замедлить работу сервера IIS или даже вывести его из строя на некоторое время...

Security Bulletin (MS00-021)

Microsoft Security Bulletin MS00-021 - -------------------------------------- Patch Available for "Malformed TCP/IP Print Request" Vulnerability Originally Posted: March 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the TCP/IP Printing Service...