4971 matches found
CVE-2002-0234
NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service resource exhaustion via a port scan to an external network, which consumes all available connections...
OpenBB 1.0.0 RC3 - Cross-Site Scripting
OpenBB 1.0.0 RC3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4824/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. It has been reported that OpenBB is vulnerable to a cross-site...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
Проблемы в CDE с сохраненными сеансами xterm (privelege escalation)
No description provided...
ISSalert: ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions
Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows remote attackers to disrupt the telnet service on affected servers. Description The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows a remote attacker to place idle...
CVE-2001-0345: Undefined Security Weakness
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
CVE-1999-1150
The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...
DoS против Marconi (multiple connections DoS)
Поддерживается ограниченное число одновременных telnet-сеансов без таймаута авторизации...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Remote Desktop DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Desktop 3.0 and previous DoS Affected: Win95/95/ME running Mcafee Remote Desktop 3.0 and below Problem: possible for remote attacker to crash Remote Desktop session. in some cases crashing the remote desktop agent. Desc: Remote desktop agent...
Дырка в маршрутизаторах Cisco (Initial TCP sequence number)
Неслучайная генерация начального номер последовательности в TCP позволяет перехватывать TCP-Сеансы...
eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow
eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet...
eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet CaptureNet. Certain versions of the this software are vulnerable to a remotely triggered...
RedHat Linux 6.06.16.2 - pam_console Monitor Activity After Logout
RedHat Linux 6.06.16.2 - pamconsole Monitor Activity After Logout / source: https://www.securityfocus.com/bid/1176/info A vulnerability exists in the pamconsole PAM module, included as part of any Linux system running PAM. pamconsole exists to own certain devices to users logging in to the consol...
Проблемы с маскарадингом в Linux
анализируя ICMP-ответы при сканировании портов, отведенных под маскарадинг по-умолчанию 61000 - 65096 можно обнаружить и перехватить активные UDP-сеансы...
PT-2000-1199 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. Recommendations: At the moment, the...
CVE-1999-0428
CVE-1999-0428 affects OpenSSL and SSLeay, allowing remote attackers to reuse SSL sessions and bypass access controls. The OpenVAS NASL reference documents a vulnerability in OpenSSL = 0.9.8s as cited) to mitigate the vulnerability. If exploit details or affected product versions vary by entry, th...