Check Point FireWall-1 Spoofed UDP Packet Remote DoS

The machine or a router on the way crashed when it was flooded by incorrect UDP packets. This attack was known to work against FireWall-1 3.0, 4.0 or 4.1 An attacker may use this flaw to shut down this server, thus preventing you from working properly. C Tenable Network Security, Inc...

SMC Router 1.2x - Random UDP Packet Denial of Service

source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets randomly to ports 0-65000. The SMC7004VWBR router is als...

Microsoft Windows 98 - Fragmented UDP Flood Denial of Service

// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...

Firewall UDP Packet Source Port 53 Ruleset Bypass

It is possible to bypass the rules of the remote firewall by sending UDP packets with a source port equal to 53. An attacker may use this flaw to inject UDP packets to the remote hosts, in spite of the presence of a firewall. C Tenable Network Security, Inc. Problem: This check is prone to false...

Microsoft ISA Server

It's possible to cause infinite reply loops with spoofed UDP packets with bith source and destination ports 1745 between 2 servers on from server to itself...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...

CVE-2002-2138

RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service panic via a malformed UDP packet on port 139...

CVE-1999-1569

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service resource exhaustion or forced disconnection via a flood of spoofed UDP connection packets, which exceeds the server's player limit...

CVE-2002-0397

Red-M 1050 Bluetooth Access Point publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allows any system on the network to obtain potentially sensitive information about the Access Point device by monitoring UDP port 8887...

CVE-2002-0649

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 MSDE allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which 1 a 0x04 byte that causes the SQL Monitor thread to generate...

Traffic amplifying via Unreal Tournament

In reply to single UDP packet server will send multiple UDP packet with payload...

Epic Games Unreal Tournament Server 436.0 - Denial of Service Amplifier

Epic Games Unreal Tournament Server 436.0 - Denial of Service Amplifier source: https://www.securityfocus.com/bid/5148/info Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server use...

Epic Games Unreal Tournament Server 436.0 - Denial of Service Amplifier

source: https://www.securityfocus.com/bid/5148/info Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play. It is possible to use an Unreal Tournament server as...

CVE-2001-1259

Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload...

CVE-2001-1259

Avaya Argent Office is affected by CVE-2001-1259, where remote attackers can trigger a denial of service by sending UDP packets to port 53 with no payload. The available public description simply states the impact as DoS; no root-cause, affected versions, exploit details, or remediation steps are...

Linux kernel IP Masquerading "destination loose" (DLOOSE) configuration passes arbitrary UDP traffic

Overview The default configuration of the IP Masquerade feature of certain Linux 2.2 kernels may allow unsolicited inbound UDP packets to traverse a NAT gateway and reach a translated network. Description As defined in RFC 1631, Network Address Translation NAT provides a means to translate a loca...

CVE-1999-1099

Kerberos 4 is affected by CVE-1999-1099 via a vulnerability where processing a malformed UDP packet triggers an error string that inadvertently reveals the realm name and the last user. The exposure is remote (network) with low attack complexity and no authentication required, and the impact is p...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

UDP DoS attack in Win2k via IKE

UDP DoS in Win2k via IKE PROBLEM ======= A DoS attack can be carried out on Win2k machines running IKE internet key exchange by sending flooding IKE with UDP packets. This can cause the machine to lock up and render 99 of the CPU. EXPLOIT ====== Connect to port 500 IKE of the Win2k box and start...

Volition Red Faction 1.0/1.1 - Game Server/Client Denial of Service

source: https://www.securityfocus.com/bid/3651/info Red Faction is a commercial 3D first person shooter game developed by Volition and published by THQ. Red Faction allows up to 32 players to game across a LAN or TCP/IP. Both the Red Faction Game Server and the client communicate on port 7755 by...