CVE-2002-1790

The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...

CVE-2002-2038

Next Generation POSIX Threading NGPT 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown methods...

PHP-Nuke 6.0 - 'modules.php' Denial of Service

source: https://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacker can exploit this vulnerability b...

Denial of Service vulnerability in VisNetic Website

Name: VisNetic WebSite Denial of Service Date: 12th of December 2002 Software affected: VisNetic WebSite 3.5.13.1 prior versions are vulnerable Advisory: http://www.krusesecurity.dk/advisories/vis0102.txt Risk: Medium Legal Notice: This Advisory is copyright by Peter Kruse. You may distribute thi...

akfingerd 0.5 Multiple Vulnerabilities

The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not affect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...

iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.19.02a: http://www.idefense.com/advisory/11.19.02a.txt Denial of Service Vulnerability in Linksys Cable/DSL Routers November 19, 2002 I. BACKGROUND Linksys Group Inc. currently sells several broadband router products,...

Various DNS service implementations generate multiple simultaneous queries for the same resource record

Overview Various implementations of DNS services may allow multiple simultaneous queries for the same resource record, allowing an attacker to apply probabilistic techniques to improve their odds of successful DNS spoofing. Description Some implementations of DNS services contain a vulnerability...

Northern Solutions Xeneo Web Server 2.12.2 - Denial of Service

Northern Solutions Xeneo Web Server 2.12.2 - Denial of Service source: https://www.securityfocus.com/bid/6098/info A denial of service vulnerability has been reported for Xeneo web server. When the web server processes a malformed HTTP request, it will crash and lead to the denial of service...

Multiple Sun RPC-based libc implementations fails to provide time-out mechanism when reading data from TCP connections

Overview A denial-of-service vulnerability exists in multiple vendor Sun RPC-based libc implementations. Description Multiple vendor Sun RPC-based libc implementations fail to properly read data from TCP connections. As a result, a remote attacker can deny service to system daemons. --- Impact A...

iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.31.02a: http://www.idefense.com/advisory/10.31.02a.txt Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router October 31, 2002 I. BACKGROUND Linksys Group Inc.’s EtherFast Cable/DSL Router with 4-Po...

IBM Infoprint Remote Management Simple DoS

Overview ======== IBM makes a series of TCP/IP enabled printers that come with remote management features: http://www.printers.ibm.com/R5PSC.NSF/Web/wglaserselect One of these features is a Telnet-based remote management service, which has a DoS vulnerability. The vulnerability discussed here was...

SMC 2652W AP Malformed HTTP Request Remote DoS

The remote SMC 2652W Access point web server crashes when sent a specially formatted HTTP request. Copyright 2002 by John Lampe ... [email protected] BUG FOUND WITH SPIKE 2.7 See the Nessus Scripts License for details Changes by Tenable: - fill the Host header to work through a transparent pro...

CVE-2002-1101

Cisco VPN 3000 Concentrator 2.2.x, 3.6Rel, and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name...

CVE-2002-0936

The Java Server Pages JSP engine in Tomcat allows web page owners to cause a denial of service engine crash on the web server via a JSP page that calls WPrinterJob.pageSetupnull,null...

CVE-2002-0853

Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a zero-length payload...

Canna SR_INIT Command Remote Overflow

The remote host is running Canna, a service that processes Japanese input and translates it from kana to kanji. It was possible to make the remote Canna server crash by sending a SRINIT command with a very long string. A remote attacker could use this to crash the service, or possibly execute...

Belkin F5D6130 Wireless Network Access Point SNMP Request Denial Of Service Vulnerability

Just picked one of these AP's up the other day and during a quick fiddle noticed a remote DoS. It is possible to disable the Belkin F5D6130 802.11b AP by issuing a small number of SNMP GetNextRequest requests to the AP. The attack results in the AP dropping all wireless connections and ceasing to...

AppSocket Half-open Connection Remote DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that Nessus cannot check if it is really running behind this port. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

Multiple Cisco products consume excessive CPU resources in response to large SSH packets

Overview Multiple Cisco networking products contain a denial-of-service vulnerability. Description Multiple Cisco networking products contain a vulnerability that allows large SSH packets to cause excessive consumption of CPU resources. In some circumstances, this resource consumption may cause t...