CVE-2001-0487

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

Security Advisory: IOS Reload after Scanning Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: IOS Reload after Scanning Vulnerability Revision 1.0 For Public Release 2001 May 24 08:00 UTC -0800 ------------------------------------------------------------------------ Summary ======= Security Scanning software can cause a memory error in...

Multiple TCP/IP implementations may use statistically predictable initial sequence numbers

Overview Attacks against TCP initial sequence number generation have been discussed for some time now. It has long been recognized that the ability to know or predict ISNs can lead to TCP connection hijacking or spoofing. What was not previously illustrated was just how predictable one...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (2)

Exploit for linux platform in category remote exploits ======================================================== BIND 8.2.x TSIG Remote Root Stack Overflow Exploit 2 ======================================================== / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind...

ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (2)

/ copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleak" bug through UDP to obtain the base / / value of the named...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (3)

Exploit for linux platform in category remote exploits ======================================================== BIND 8.2.x TSIG Remote Root Stack Overflow Exploit 3 ======================================================== / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind...

ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (3)

/ copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Solaris 2.7 x86 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleek" bug through UDP to obtain the base / / value of the named process frame...

CVE-2000-0804

The vulnerability CVE-2000-0804 affects Check Point VPN-1/FireWall-1 4.1 and earlier. It is caused by a flaw in handling fragmented TCP connection requests or reopening closed one-way connections, allowing remote attackers to bypass the directionality check (One-way Connection Enforcement Bypass)...

CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."...

CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."...

Дырка в FreeBSD (IP Spoofing)

Алгоритм генерации псевдо-случайной последовательности позволяет по трем пакетам определить состояние генератора псевдо-случайно последовательности используемого при задании номеров последовательностей и воспроизвести его на удаленной машине, что позволяет перезватить любое TCP-соединение...

Дырка в Typsoft FTP Server

Переполнение буфера при длинном имени пользователя/пароля. Некорректная обработка полуоткрытого TCP соединения...

Дырка в Firewall-1 Session Agent

Session Agent принимает соединение со стороны сервера на порт 261, при после чего проводится авторизация. Установив TCP-соединение на этот порт можно спровоцировать отказ в обслуживании, т.к. сервер не сможет соединиться, кроме того в более старых клиентах не поддерживается шифрование данных, что...

CVE-1999-0416

The provided connected sources (RH/CVE/Red Hat, CVE/List, NVD) confirm CVE-1999-0416 as a vulnerability in Cisco 7xx series routers where a remote attacker can trigger a system reload by establishing a TCP connection to the router’s TELNET port. The dataset does not supply additional technical sp...

CVE-2000-0143

Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.

CVE-2000-0143

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...

CVE-2000-0143

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...

cisco.7xx.tcp.http.txt

Date: Thu, 11 Mar 1999 16:00:00 -0000 From: [email protected] Reply-To: [email protected] To: [email protected] Subject: Cisco security notice: Cisco 7xx TCP and HTTP vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Cisco 7xx TCP and HTTP Vulnerabilities...

nt+exceed.DoS.txt

Date: Tue, 27 Apr 1999 13:29:26 -0700 From: "LaFournaise, Chris J." To: [email protected] Subject: NT/Exceed D.O.S. This is regarding Hummingbird's Exceed X emulator v5 and possibly v6 running on Windows NT. I haven't tested Win95/98. The Exceed X server allows inbound TCP connections on port...

Linux Kernel 2.0.302.0.352.0.362.0.37 - Blind TCP Spoofing

Linux Kernel 2.0.302.0.352.0.362.0.37 - Blind TCP Spoofing / source: https://www.securityfocus.com/bid/580/info Certain Linux kernels in the 2.0.3x range are susceptible to blind TCP spoofing attacks due to the way that the kernel handles invalid ack sequence numbers, and the way it assigns IDs t...