ID Software Quake 1.9 - Denial of Service

ID Software Quake 1.9 - Denial of Service // source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent...

Advisory CA-2001-17

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-17 Check Point RDP Bypass Vulnerability Original release date: July 09, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Check Point VPN-1 and FireWall-1 Version 4.1 Overview A...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

Raptor Firewall 4.0/5.0/6.0.x - Zero Length UDP Packet Resource Consumption

source: https://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered. When the firewall receives zero length UDP packets, the machine hosting...

Raptor Firewall 4.05.06.0.x - Zero Length UDP Packet Resource Consumption

Raptor Firewall 4.05.06.0.x - Zero Length UDP Packet Resource Consumption source: https://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered...

Microsoft SQL Server UDP Query Remote Version Disclosure

Microsoft SQL server has a function wherein remote users can query the database server for the version that is being run. The query takes place over the same UDP port that handles the mapping of multiple SQL server instances on the same machine. It is important to note that, after Version 8.00.19...

DoS против Cisco Catalyst (malformed SNMP packet)

Пустой пакет UDP/161 приводит к отказу коммутатора...

Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled.

Hi It's possible to crash Cisco Catalyst 2900XL with a empty UDP packet to port 161 when SNMP is disabled. Other switches also? The crash only occurs when the switch is booted with SNMP disabled. Seems that SNMP is listening, even if SNMP is disabled.. ? I have only tested this with Software...

Cisco HSRP Weakness/DoS

Hi I was playing with Cisco's HSRP Hot Standby Routing Protocol, and there is a major weakness in that protocol that allow any host in a LAN segment to make a HSRP DoS. Short very explain of HSRP. HSRP uses UDP on port 1985 to multicast address 224.0.0.2, and the authentication is in clear text...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service

Cisco Catalyst 2900 12.0 - 5.2XU SNMP Empty UDP Packet Denial of Service source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use ...

Cisco Catalyst 2900 12.0 - '5.2'XU SNMP Empty UDP Packet Denial of Service

source: https://www.securityfocus.com/bid/2689/info The Catalyst series switch is a scalable, high performance layers 2 and 3 switch manufactured by Cisco Systems. The Catalyst series ranges in size, and is designed for use in organizations sized from small business to large enterprise. A problem...

Дырка в ADSL-модемах Alcatel (UDP echo tftp spoofing)

Если в локальной сети есть машина поддерживающая UDP echo, то можно через нее получить доступ по TFTP К модему...

CVE-2001-1400

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service deadlock...

[SECURITY] [DSA-047-1] multiple kernel problems

Package : various kernel packages Problem type : multiple Debian-specific: no The kernels used in Debian GNU/Linux 2.2 have been found to have multiple security problems. This is a list of problems based on the 2.2.19 release notes as found on http://www.linux.org.uk/ : binfmtmisc used user pages...

IPFilter 3.x - Fragment Rule Bypass

source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts behind an IPFilter firewall. The...

IPFilter 3.x - Fragment Rule Bypass

IPFilter 3.x - Fragment Rule Bypass source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts...

A fragmentation attack against IP Filter

I did not want to release this on a Friday afternoon. Happy experimenting -Thomas ---- cut here ---- A fragmentation attack against IP Filter April 6th, 2001 Thomas Lopatic [email protected] The research for this advisory was supported by TUV data protect GmbH, a TUV Rheinland/Berlin-Brandenburg...

CVE-2001-0324

The vulnerability (CVE-2001-0324) affects Windows 98 and Windows 2000 Java clients. A Java applet can open a large number of UDP sockets, the underlying cause being excessive UDP socket creation, which prevents the host from establishing additional UDP connections and can lead to a crash. No expl...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...