Juniper Junos LAST_ACK State DoS (JSA10686)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to the improper handling of TCP connection transitions to the LASTACK state when the device has more data to send. A remote attacker can exploit this cause the socke...

Design/Logic Flaw

Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.2X52 before 13.2X52-D25, 13.3 before 13.3R6, 14.1R3 before 14.1R3-S2, 14.1 before 14.1R4, 14.1X53...

CVE-2015-5358

CVE-2015-5358 describes a DoS in Juniper Junos where TCP connections move to LAST_ACK when the device has more data to send, allowing remote attackers to exhaust mbufs and connections. Affected Junos versions include: 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-...

Juniper Networks Junos OS mbuf Denial of Service Vulnerability

Junos OS is prone to a DoS vulnerability by mbuf exhaustion. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

F5 Networks BIG-IP : OpenSSH vulnerability (K14741)

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service connection-slot exhaustion by periodically making many new TCP connections...

RedHat Update for kernel RHSA-2015:1042-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : kernel (RHSA-2015:1042)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Nfsutils TCP Connection Termination Denial of Service attack - Ver2 (CVE-2004-1014)

A denial-of-service vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Debian Security Advisory DSA 3251-1 (dnsmasq - security update)

Nick Sampanis discovered that dnsmasq, a small caching DNS proxy and DHCP/TFTP server, did not properly check the return value of the setupreply function called during a TCP connection, which is used then as a size argument in a function which writes data on the client OpenVAS Vulnerability Test...

Dnsmasq 2.72 Unchecked returned value

"Dnsmasq 2.72 Unchecked returned value" Description ------------------------------------------------------------ Dnsmasq does not properly check the return value of the setupreply function called during a tcp connection by the tcprequest function. This return value is then used as a size argument...

[SECURITY] Fedora 21 Update: ax25-tools-0.0.10-0.12.rc2.fc21

ax25-tools is a collection of tools that are used to configure an ax.25 ena bled computer. They will configure interfaces and assign callsigns to ports as w ell as Net/ROM and ROSE configuration. This package only contains the command line programs; the GUI programs are contained in ax25-tools-x...

Cisco CBOS 2.x Multiple TCP Connection Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3236/info CBOS is the Cisco Broadband Operating System, firmware designed for use on Cisco 600 series routers. It is maintained and distributed by Cisco Systems. CBOS becomes unstable when it receives multiple TCP...

BIND 8.2.x - (TSIG) Remote Root Stack Overflow Exploit (2)

No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the infoleak bug through UDP to obtain the...

Computer Associates License Server GETCONFIG Overflow

No description provided by source. $Id: calicservgetconfig.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Moderate: Red Hat Security Advisory: openstack-foreman-installer security, bug fix, and enhancement update

An updated openstack-foreman-installer package that fixes one security issue, several bugs, and adds various enhancements is now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common...

CVE-2014-1296

CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header's value, which allows remote attackers to bypass intended access restrictions by triggering the closing of a TCP...

CVE-2014-1296

CFNetwork in iOS before 7.1.1, OS X up to 10.9.2, and Apple TV before 6.1.1 mishandles incomplete Set-Cookie headers, allowing a remote attacker to bypass access restrictions by closing the TCP connection during header transmission (HTTPOnly). Public fix/version not specified in the provided docu...

AIX OpenSSH Advisory : openssh_advisory2.asc

The version of OpenSSH running on the remote host is affected by a denial of service vulnerability. The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a deni...

CVE-2014-0253

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service ASP.NET daemon hang via crafted HTTP requests that trigger persistent resource consumption for a 1 stale or 2 clos...

haneWIN DNS Server 1.5.3 - Denial of Service

Exploit Title: haneWIN DNS Server 1.5.3 - Denial of service Author: sajith version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ vulnerable app link:http://www.hanewin.net/dns-e.htm Tested in windows Xp sp3 POC by sajith shetty import socket target = "127.0.0.1" port = 53 try...