[security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 Title: SSRT2371 HP OpenVMS Potential POP server local vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: September 2002 SEVERITY:...

[security bulletin] SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP REVISION: 0 NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: 10 September, 2002 SEVERITY:...

Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later

Hello, Over a year ago, I published a paper that attempted to analyze the randomness of PRNGs used in TCP/IP stacks on several operating systems. The approach I've chosen resulted in detecting some non-trivial dependencies in several generators, and some amusing 3D pictures. The original RAZOR...

CVE-2002-0886

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service hang or memory consumption via 1 a large packet to the DHCP port, 2 a large packet to the Telnet port, or 3 a flood of large packets to the CPE, which causes the TCP/IP stack to consume large...

Security Advisory: CBOS - Improving Resilience to DoS Attacks

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS - Improving Resilience to Denial-of-Service Attacks ========================================================================= Revision 1.0 For Public Release 2002 May 23 16:00 UTC+0000 -...

Cisco CBOS 2.x - Broadband Operating System TCPIP Stack Denial of Service

Cisco CBOS 2.x - Broadband Operating System TCPIP Stack Denial of Service source: https://www.securityfocus.com/bid/4815/info Cisco Broadband Operating System CBOS is the operating system used on Cisco 600 series routers. When the CBOS TCP/IP stack is forced to process a high number of unusually...

Cisco CBOS 2.x - Broadband Operating System TCP/IP Stack Denial of Service

source: https://www.securityfocus.com/bid/4815/info Cisco Broadband Operating System CBOS is the operating system used on Cisco 600 series routers. When the CBOS TCP/IP stack is forced to process a high number of unusually large packets, it will consume all memory. This will cause the router to...

CVE-2002-0208

PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire...

cqure.net.20020412.bordermanager_36_mv1.a

cqure.net Security Vulnerability Report No: cqure.net.20020412.bordermanager36mv1.a ============================================== Vulnerability Summary --------------------- Problem: Multiple vulnerabilities identified in Novell Border Manager 3.6. During our brief look at Novell Border Manager...

CVE-2002-0208

PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire...

FreeBSD-SA-02:21.tcpip

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:21.tcpip Security Advisory FreeBSD, Inc. Topic: routing table memory leak Category: core Module: net Announced: 2002-04-17 Credits: Jayanth Vijayaraghavan Ruslan Ermilov...

CVE-1999-1059

CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...

CVE-1999-1118

ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters...

CVE-1999-1059

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1118

CVE-1999-1118 affects Solaris 2.6: local users can cause a denial of service by modifying certain TCP/IP parameters via ndd. The available sources describe the vulnerability and its impact as a local attack with partial availability impact, but no remediation patch/version is provided in the supp...

Denicomp Winsock RSHDNT Standard Error 2.20.00 - Denial of Service

Denicomp Winsock RSHDNT Standard Error 2.20.00 - Denial of Service // source: https://www.securityfocus.com/bid/3659/info Winsock RSHD/NT is a Remote Shell Daemon for Windows NT and Windows 2000. It uses the standard Unix rsh and rcp commands. rsh ie "remote shell" allows the execution of a...

Volition Red Faction 1.0/1.1 - Game Server/Client Denial of Service

source: https://www.securityfocus.com/bid/3651/info Red Faction is a commercial 3D first person shooter game developed by Volition and published by THQ. Red Faction allows up to 32 players to game across a LAN or TCP/IP. Both the Red Faction Game Server and the client communicate on port 7755 by...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

CVE-1999-1061

CVE-1999-1061 affects HP LaserJet printers with JetDirect network cards configured for TCP/IP. The vulnerability allows unauthenticated remote access to the printer, enabling an attacker to change the printer’s IP address or disable logging. Public details from OpenVAS/Nessus describe an unauthen...

CVE-1999-1291

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...