MS Frontpage Server Extensions fp30reg.dll Exploit (MS03-051)

漏洞描述：Microsoft FrontPage服务器扩展是Microsoft公司开发的用于加强IIS Web服务器的功能的软件包。Microsoft FrontPage Server Extensions存在两个新的安全漏洞，可导致远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以FrontPage进程权限在系统上执行任意指令。 第一个漏洞是由于FrontPage服务扩展的远程调试功能上存在缓冲区溢出，这个功能用于用户远程连接FrontPage服务扩展的服务器和远程调试内容使用，如Visual...

I2S-LAB-25-09-2003.txt

I2S LAB Security Advisory http://www.I2S-LAB.com Date : 25/09/2003 Affected systems : FirstClass build 133 SP3 and previous versions HTTP Daemon Vendor : http://www.centrinity.com Issue : Attackers can remotely shutdown internet services HTTP/FTP/SMTP/POP3/IMAP4/... Description FirstClass is a...

Important: Red Hat Security Advisory: xinetd security update

Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...

DEBIAN-CVE-2002-1391

Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument...

ProFTPd 1.2.x - 'STAT' Denial of Service

source: https://www.securityfocus.com/bid/6341/info A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will result in a denial of service condition...

CERT Advisory CA-2002-31 Multiple Vulnerabilities in BIND

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-31 Multiple Vulnerabilities in BIND Original release date: November 14, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running various versions of BIND 4 and...

Microsoft Windows 2000 vulnerable to DoS via malformed packets sent to port 445/tcp

Overview The default configuration of Microsoft Windows 2000 does not properly handle malformed packets received on TCP port 445. As a result, Windows may cease to function normally upon receipt of malformed packets on this port. Description Microsoft LAN Manager LANMAN is enabled by default on...

DoS против Arescom NetDSL

Несколько длинных строк в порт телнет приводит к отказу сервиса...

DoS против IRIX с помощью IGMP

Неправильный IGMP-пакет приводит к отказу в обслуживании...

DoS против PCAnywhere (connection flood)

Большое число запросов на соединение приводит к отказу в обслуживании...

DoS против XFree-xfs

Большое количество случайных данных в порт приложения приводит к отказу в обслуживнаии...

GoAhead Web Server 2.1 (Windows) - Denial of Service

GoAhead Web Server 2.1 Windows - Denial of Service source: https://www.securityfocus.com/bid/2607/info The GoAhead Web Server is a freely available, open source software package developed by GoAhead. The GoAhead Web Server offers a multi-platform web server and source code to the community. A...

DoS против BinTec X4000 (SYN scan)

SYN-Пакет в порт 1723 pptp вызывает отказ в обслуживании...

DoS против NetBIOS/TCP/IP - NBT flood

Постоянная отправка намеренно поврежденных пакетов приводит к отказу в обслуживании NetBIOS - клиентов...

Evolvable Shambala Server 4.5 - Denial of Service

Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...

[COVERT-2000-09] Windows NetBIOS Name Conflicts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 27, 2000 Windows NetBIOS Name Conflicts COVERT-2000-09 o Synopsis The Microsoft Windows implementation of NetBIOS allows an unsolicited UDP datagram to remotely deny access to services offere...

DoS против telnet в Windows 2000

Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...

HP JetAdmin 6.0 - Printing Denial of Service

source: https://www.securityfocus.com/bid/1246/info By default JetAdmin Web Interface Server listens on port 8000. If a malformed URL request is sent to port 8000 this will cause the server services to stop responding. The service must be stopped and restarted to regain normal functionality...

Remote Dos attack against Intel express 8100 router

Remote Dos attack against Intel express 8100 router --------------------------------------------------- Intel express 8100 isdn router vulnerable for remote icmp fragmented packets and oversize packets. exploit demonstrate as follows.. Download libnet and isic-0.05 test following exploit. And do...

Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service

source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's services. Restarting the application or waiting until the URL is...