Important: Red Hat Security Advisory: fileutils security update

Updated fileutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the "ls" program, which is used to list information about files and directories. Georgi Guninski discovered...

Important: Red Hat Security Advisory: : Updated fileutils/coreutils package fix ls vulnerabilities

Updated fileutils and coreutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the "ls" program, which is used to list information about files and directories. In Red Hat...

CVE-2003-0804

The CVE-2003-0804 entry concerns the ARP processing path (arplookup) on FreeBSD and some BSD-derived systems. A local-subnet attacker can flood the system with spoofed ARP requests, exhausting resources and causing a denial of service/panic. Root cause: arplookup does not delete unneeded ARP cach...

CVE-2003-0804

The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service resource starvation and panic via a flood of spoofed ARP requests...

CVE-2003-0804: Undefined Security Weakness

The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service resource starvation and panic via a flood of spoofed ARP requests...

BSD arp DoS

By sending spoofed arp-replies it's possible to cause memory starvation with arp table leading to system crash...

FreeBSD-SA-03:14.arp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced: 2003-09-25 Credits:...

x509 cert parsing in web browsers

Hello, While playing with the way SSL-enabled web browsers handle x509 certificates, I found several odd things - none of which is related to the recent issues with forging certs for MSIE, but related to the problems OpenSSL had recently. Due to some unrelated circumstances, I have very limited...

Cisco PIX 4.x/5.x TACACS+ - Denial of Service

source: https://www.securityfocus.com/bid/2551/info PIX is an enterprise firewall engineered and maintained by Cisco Systems. It is designed to provide robust features and multiple methods of access control and filtering. A problem with the PIX could allow a denial of service. PIX firewalls using...

bindview.naptha.txt

The NAPTHA DoS vulnerabilities Issue Date: 30 November 2000 Updated: 18 December 2000 Contact: Robert Keyes Topic: Network DoS vulnerabilities Overview: A set of network DoS vulnerabilities has been discovered, and the name NAPTHA is being used to describe them as a group. The NAPTHA...

D-Link Dl-704 2.56 b5 - IP Fragment Denial of Service

D-Link Dl-704 2.56 b5 - IP Fragment Denial of Service // source: https://www.securityfocus.com/bid/3306/info The DLink Dl-704 is a DSL/Cable router and switch designed for home network use. A problem has been discovered in the Dl-704 router. Upon receiving a high amount of fragmented IP packets,...

SuSE Linux 6.2 Slackware Linux 3.23.6 - identd Denial of Service

SuSE Linux 6.2 Slackware Linux 3.23.6 - identd Denial of Service // source: https://www.securityfocus.com/bid/587/info In the inetd.conf under certain distributions of SuSE Linux the in.identd daemon is started with the -w -t120 option. This means that one identd process waits 120 seconds after...

SuSE Linux 6.2 / Slackware Linux 3.2/3.6 - 'identd' Denial of Service

// source: https://www.securityfocus.com/bid/587/info In the inetd.conf under certain distributions of SuSE Linux the in.identd daemon is started with the -w -t120 option. This means that one identd process waits 120 seconds after answering the first request to answer the next request. If a...