Серьезная DoS-атака пртив *BSD

IP-пакет с некорректным смещением параметров IP например timestamp вызывает аварийную остановку системы...

firewall-1.fragment.txt

SCLAIMER It was never my intent to identify a DoS attack on FW-1. I was attempting to research and understand how FW-1 handles IP Fragmentation. Everthing that follows is a result of that research. Full findings of my research can be found at http://www.enteract.com/lspitz/fwtable.html. On...

Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl))

Not much to say. While performing basic input validation checks in Lotus Domino ESMTP service see subject running on the top of Windows NT system this applies probably to other platforms as well, within approximately 30 seconds we found remote buffer overflow leading to system crash and, if...

Серьезный DoS против BeOS

Большое количество некорректно смещенных фрагментированных TCP-пакетов вызывает крах системы...

BeOS 5.0 - TCP Fragmentation Remote Denial of Service

source: https://www.securityfocus.com/bid/1222/info BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot. root@localhost isic-0.05 ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0 -I0 -T0 -u0 -t0 Compiled against Libnet 1.0.1b Installing...

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' an...

BeOS 5.0 - TCP Fragmentation Remote Denial of Service

BeOS 5.0 - TCP Fragmentation Remote Denial of Service source: https://www.securityfocus.com/bid/1222/info BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot. root@localhost isic-0.05 ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0 -I0...

RFParalyze.txt

--/-----/-----/-----/-----/-----/-----/-----/-----/-----/-----/--- / / / e / - el8.org advisory / l / / 8 / - Evan Brewer / . / - Rain Forest Puppy / o / / r / - Synopsis: Cause undesired effects remotely against / g / win95,8 through an oddly formed winpopup message. / /...

Microsoft Windows Server 2000/95/98/ME/NT 3.5.x/Enterprise Server 4.0/Terminal Server 4.0/Workstation 4.0 Microsoft DoS Device Name - Denial of Service

Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/95/98/ME/NT 3.5.x/NT Enterprise Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 MS DOS Device Name DoS Vulnerability source: https://www.securityfocus.com/bid/1043/info Due to an inherent fault within the...

Microsoft Windows Server 20009598MENT 3.5.xEnterprise Server 4.0Terminal Server 4.0Workstation 4.0 Microsoft DoS Device Name - Denial of Service

Microsoft Windows Server 20009598MENT 3.5.xEnterprise Server 4.0Terminal Server 4.0Workstation 4.0 Microsoft DoS Device Name - Denial of Service Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/95/98/ME/NT 3.5.x/NT Enterprise Server 4.0/NT Terminal Server 4.0/NT...

bordermanager-dos.txt

The issue also affects BorderManager 3.0 sp2 running on NetWare 4.11 sp6a. I was able to replicate the memory allocation error but have not had any luck with obtaining the high CPU utilisation. Again, csatpxy.nlm is loaded by default on this system and unloading it stopped the memory allocation...

CVE-1999-0486

CVE-1999-0486 affects AOL Instant Messenger. A remote attacker sending a malicious hyperlink to a receiving client can trigger a denial of service, potentially crashing the system. Multiple connected sources (Red Hat advisory, CVE lists, NVD/NIST entry) corroborate the basic impact and vector as ...

CVE-1999-0486

Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash...

CVE-1999-0694

Technical details about CVE-1999-0694 are not publicly available in the provided documents. Monitor for updates.

TransSoft Broker FTP Server 3.0 x/4.0 - User Name Buffer Overflow

source: https://www.securityfocus.com/bid/783/info If an unusually long user name is passed to the Broker FTP server software, the program will crash. If the program is running as a service, the service will consume all available memory and crash the entire system...

CVE-1999-0179

Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share...

CVE-1999-0485

Remote attackers can cause a system crash through ipintr in ipq in OpenBSD...

CVE-1999-0485

CVE-1999-0485 concerns OpenBSD: remote attackers can crash the system via ipintr() in ipq. The connected Red Hat and CVE records repeat the same description; no versions, patches, or remediation details are provided in the supplied documents. Exploit specifics, affected products, or mitigations a...

linux-2.2.0-DoS.txt

Date: Wed, 27 Jan 1999 03:14:29 -0500 From: //Stany To: [email protected] Subject: Re: 2.2.0 SECURITY fwd Later on down the thread there are other people then Dan Burcaw who say that the bug crashes their boxes too. I suggest reading the thread on Linux Kernel archives for more information. Se...

nt-tcpip-dos.txt

Date: Fri, 25 Sep 1998 18:19:50 +0200 From: Gigi Mori Subject: Crashing NT with Native Calls Hi, Playing with TCPIP.SYS I've noticed that any user could crash the local system with a IRQLNOTLESSOREQUAL exception just calling the undocumented function NtDeviceIoControlFile with an handle to TCPIP...