Red Hat 6.2 inetd Internal Service Connections Remote DoS

The remote host has a bug in its 'inetd' server. 'inetd' is the 'internet super-server' and is in charge of managing multiple sub-servers like telnet, ftp, chargen, and more. There is a bug in the inetd server that comes with RedHat 6.2, which allows an attacker to prevent it from working...

DOS for Icq 2001&2002

Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...

Three Windows XP UPNP DOS attacks

Below you will find a quick recap of a few denial of service exploits I discovered against Windows XP and selected versions of WinME. Microsoft confirmed my findings: bulletin MS01-54. The paper is a narrative and the author hopes it will be useful for newbies and an enjoyable paper for the...

Pacific Software Carello 1.2.1 Shopping Cart - Command Execution

Pacific Software Carello 1.2.1 Shopping Cart - Command Execution source: https://www.securityfocus.com/bid/2729/info It is possible for a remote user to execute arbitrary commands on a host using Carello Shopping Cart software. A specially crafted HTTP request could cause inetinfo.exe to consume...

Oracle 8 Server - 'TNSLSNR80.EXE' Denial of Service

source: https://www.securityfocus.com/bid/2626/info A denial of service vulnerability exists in Oracle 8. An attacker connecting to port 1526 and sending invalid input will cause the 'TNSLSNR80.EXE' process to consume all available system resources, causing the server to stop responding...

Oracle 8 Server - TNSLSNR80.EXE Denial of Service

Oracle 8 Server - TNSLSNR80.EXE Denial of Service source: https://www.securityfocus.com/bid/2626/info A denial of service vulnerability exists in Oracle 8. An attacker connecting to port 1526 and sending invalid input will cause the 'TNSLSNR80.EXE' process to consume all available system resource...

WU-FTPD 2.42.52.6 Trolltech ftpd 1.2 ProFTPd 1.2 BeroFTPD 1.3.4 FTP - glob Expansion

WU-FTPD 2.42.52.6 Trolltech ftpd 1.2 ProFTPd 1.2 BeroFTPD 1.3.4 FTP - glob Expansion source: https://www.securityfocus.com/bid/2496/info Many FTP servers are vulnerable to a denial of service condition resulting from poor globbing algorithms and user resource usage limits. Globbing generates...

Microsoft Windows NT PPTP DoS Vulnerability

Description A remote attacker could cause a denial of service condition in Windows NT. Submitting multiple maliciously crafted packets to the PPTP services will cause the consumption of all available system resources. Technologies Affected Microsoft Windows NT 4.0 Microsoft Windows NT Enterprise...

VIGILANTE-2000009.txt

"Invalid URL" DoS Advisory Code: VIGILANTE-2000009 Release Date: September 6, 2000 Systems Affected: - Internet Information Server 4.0 for Windows NT 4.0 - Possibly Windows NT 4.0 in general read Microsoft's note THE PROBLEM A certain series of requests can cause INETINFO.EXE to gradually consume...

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If...

Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/503/info The IMail ldap service has an unchecked buffer, resulting in a classic buffer overflow vulnerability. While it does not crash the service, it drives CPU utilization up rendering the system essentially unusable. Telnet to target machine, port 389...

CVE-1999-1298

Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources...