CVE-2004-0525

HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 are affected. A remote attacker can cause a denial of service (hang) by accessing iLO over TCP/IP port zero (reserved port). The condition is explicitly stated as a DoS due to use of the reserved port, with no additional exploitat...

CVE-2004-1355

Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service system panic via unknown vectors...

TCP/IP Sequence Prediction Blind Reset Spoofing DoS

The remote host is affected by a sequence number approximation vulnerability that allows an attacker to send spoofed RST packets to the remote host and close established connections. This may cause problems for some dedicated services BGP, a VPN over TCP, etc. C Tenable Network Security, Inc...

CVE-2003-0905

Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service disallowing new connections via a certain sequence of TCP/IP packets...

motorolaT720.txt

Product: Motorola T720 Cell phones http://www.motorola.com Versions: T270 Bug: DoS vulnerability Impact: Attacker's can reboot the cellphone remotely. Date: March 01, 2004 Author: Shaun Colley Email: [email protected] WWW: http://www.nettwerked.co.uk Introduction "The Motorola T720 proves that...

Motorola T720 cell phone DoS vulnerability.

Product: Motorola T720 Cell phones http://www.motorola.com Versions: T270 Bug: DoS vulnerability Impact: Attacker's can reboot the cellphone remotely. Date: March 01, 2004 Author: Shaun Colley Email: [email protected] WWW: http://www.nettwerked.co.uk Introduction "The Motorola T720 proves that...

TCP/IP Multicast Address Handling Remote DoS (spank.c)

Nessus has detected that the remote host responds to TCP packets that are coming from a multicast IP address. An attacker can exploit this to conduct a 'spank' denial of service attack, resulting in the host being shut down or network traffic reaching saturation. Also, this vulnerability can be...

Microsoft Security Bulletin MS03-026: Buffer Overrun In RPC Interface Could Allow Code Execution(Q823980)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Buffer Overrun In RPC Interface Could Allow Code Execution 823980 Date: 16 July 2003 Software: Microsoftr Windows r NT 4.0 Microsoft Windows NT 4.0 Terminal Services Edition Microsoft...

CVE-2003-0364

The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service CPU consumption via certain packets that cause a large number of hash table collisions...

CVE-2003-0364

The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service CPU consumption via certain packets that cause a large number of hash table collisions...

CVE-2003-0364

CVE-2003-0364 affects the Linux kernel 2.4 series: TCP/IP fragment reassembly handling can be abused by crafted packets to trigger high CPU usage via hash table collisions, leading to a denial of service. Debians OpenVAS entries reference kernel updates (e.g., kernel-patch-2.4.18-powerpc, kernel-...

CVE-2002-1474

Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service...

Brocade Firmware SNMP Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Brocade Firmware SNMP Vulnerability Number : 20030405-01-I Date : April 11, 2003 Reference: SGI BUG 876762 Reference: CERT CA-2002-03 Reference: CVE CAN-2002-0013 Reference: CVE CAN-2002-0017 Fixed in : Brocade Firmware v2.6.0d or...

FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database.

I recently discovered a serious bug in FileMaker Pro's database sharing. FileMaker have just released an advisory about this on their security pages: http://www.filemaker.com/support/security -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: FileMaker Pro network protocol sends passwords to...

Problems with Snort-1.9.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: Snort-1.9.1 using a default snort.conf configuration does not detect certain crafted packets. Details: Snort-1.9.1 does not detect packets when the SYN,FIN and ECN echo bits set. The following is an example of a packet: 12:37:12.386797...

Microsoft Security Bulletin MS03-010: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks 331953 Date: 26 March 2003 Software: Microsoftr Windowsr NT 4.0, Windows 2000, or Windows XP Impact: denial of servi...

TCP/IP implementations handle unusual flag combinations inconsistently

Overview Various vendors' TCP/IP implementations handle packets containing unusual flag combinations in different ways, which may lead to a violation of implicit or explicit security policies. Description Background on TCP/IP Connection Semantics To establish a TCP connection, a client and server...

CVE-2002-1474

Technical details for CVE-2002-1474 are not publicly available in the provided documents. The materials only repeat a generic denial-of-service description for HP Tru64 UNIX TCP/IP. Monitor for updates; no vendor, impact, or remediation details are disclosed here.

CVE-2002-1474

Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service...

CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...