2344 matches found
CVE-1999-1291
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...
CVE-1999-1291
The CVE-1999-1291 entry concerns the TCP/IP stack in Microsoft Windows 95 and Windows NT 4.0 (potentially others). The vulnerability allows an remote attacker to reset a target’s TCP connections by forcing a reset (RST) in a crafted packet flow (e.g., via a PSH ACK or similar), using the resultin...
Bug in MAS90 Accounting Platform remote access?
Greetings, Not sure if any previous issues with this application have surfaced here, but I've run Sage Software's MAS 200 is an accounting platform which can be configured to permit remote access to server-side data over TCP/IP. A host application listens for connections on the server, and all...
fpf module and packet fragmentation:local/remote DoS.
Fpf kernel module by |CyRaX| [email protected] www.pkcrew.org alters linux tcp/ip stack to emulate other OS'es against nmap/queso fingerprints using parser by FuSyS that reads nmap-os-fingerprints for os emulation choice. However, attempts to send fragmented packets to local or remote machine with...
Ошибки в Cisco 600 (TCP/IP stack problems)
Различные ошибки реализации стека TCP/IP...
Advisory CA-2001-09
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-09 Statistical Weaknesses in TCP/IP Initial Sequence Numbers Original release date: May 01, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems using TCP stacks...
ICMP fragmentation required but DF set problems.
Hi all, The problem I'm exposing is quite obvious, but unfortunatelly can be used in a very simple way by script kiddies. SYNOPSIS It's possible to slowdown a lot connections between two arbirary hosts but at least one with the PMTU discovery enabled using some spoofed TCP/IP packet. Maybe you ca...
CVE-2000-1039
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities...
Linux Kernel 2.2 (TCP/IP Weakness) Exploit
Exploit for linux platform in category remote exploits ========================================== Linux Kernel 2.2 TCP/IP Weakness Exploit ========================================== / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE ...
Linux Kernel 2.2 - TCPIP Spoof IP
Linux Kernel 2.2 - TCPIP Spoof IP / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE IT AT YOUR OWN RSIK! THIS PROGRAM IS LICESED UNDER THE GPL and belongs to a security- advisory of team teso. You should get the full advisory with...
Linux Kernel 2.2 - TCP/IP Spoof IP
/ Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE IT AT YOUR OWN RSIK! THIS PROGRAM IS LICESED UNDER THE GPL and belongs to a security- advisory of team teso. You should get the full advisory with paper on either...
CVE-2000-1039
CVE-2000-1039 (Naptha) describes DoS in various TCP/IP stacks and network apps where remote attackers flood a target with TCP connection attempts and complete the TCP handshake without maintaining state, exhausting resources and causing partial availability impact. Connected documents confirm the...
CVE-2000-1039
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities...
DoS против NetBIOS/TCP/IP - NBT flood
Постоянная отправка намеренно поврежденных пакетов приводит к отказу в обслуживании NetBIOS - клиентов...
MS00-091: Incomplete TCP/IP Packet Vulnerability (199346)
The hotfix for the 'incomplete TCP/IP packet' problem has not been applied. This vulnerability allows a user to prevent this host from communicating with the network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10563; scriptversion"1.46"; scriptcvsdate"Date:...
Утечка информации в Novell Netware (Object enumeration)
Сервера Netware с поддержкой TCP/IP сообщают информацию об объектах NDS через анонимное соединение TCP/524...
IIS HACKING
Hi Folks, i have just compiled the well-known IIS tricks. I hope it will be helpful for securing your server. any comment,suggestion or insult...? wellcome MAB- SECURING IIS by BREAKING ===================================================== by Mount Ararat Blossom 9/15/2000...
anonymous SMB service DoS on nt5 (and TCP DoS on nt4)
been aware of a DoS attack against NT that i originally thought was SMB-related, for well over a year, now. source code has been available for this length of time, too. what you do is send SMB requests without reading the responses back. i originally thought that you had to send SMBtrans IPC$...
DoS против протокола SMB (Server) в WinNT/Win2K
Специально сконструированные SMB-Пакеты например с некорректной длинной пакета приводят к отказу службы сервера, а в некоторых случаях к полному отказу стека TCP/IP...