Microsoft ISA Server

It's possible to cause infinite reply loops with spoofed UDP packets with bith source and destination ports 1745 between 2 servers on from server to itself...

CVE-2002-1507

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2002-0650: Undefined Security Weakness

The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service bandwidth consumption via a "ping" style packet to the Resolution Service UDP port 1434 with a spoofed IP address of another SQL Server system, which causes the two servers to exchange...

CVE-2002-1542

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

CVE-2002-1507

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2002-1507

CVE-2002-1507 affects Unreal Tournament 2003 (UT2003) clients and servers. The vulnerability allows remote denial of service via malformed messages sent over UDP to ports 7778 or 10777. The provided sources describe the affected component as UT2003 network clients/servers and identify the issue a...

CVE-2002-1542

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

CVE-2002-1507: Undefined Security Weakness

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2002-1542: Undefined Security Weakness

SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service crash via a large UDP datagram, possibly triggering a buffer overflow...

L2TP Network Server Detection

The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...

tcpdump ISAKMP DoS

Endless loop on malcrafted ISAKMP packet UDP/500...

Moderate: Red Hat Security Advisory: tcpdump security update

Updated tcpdump, libpcap, and arpwatch packages are available to fix an incorrect bounds check when decoding BGP packets and a possible denial of service. Tcpdump is a command-line tool for monitoring network traffic. The BGP decoding routines in tcpdump before version 3.6.2 used incorrect bounds...

Multiple game servers DDoS attacks

Large UDP response is sent in reply to short request withous session setup...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...

CVE-2003-1079

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

Sygate personal firewall protection bypass

It's possible to access any listening UDP port...

Sygate Security Bulletin ID SS20030129-0002

Sygate Security Bulletin Sygate was made aware of an exposure in Sygate Personal Firewall 5.0 and Sygate Security Agent 3.0 on 1/23/2003 by David Fernandez Madrid [email protected]. Sygate Security Bulletin ID ---------------------------- SS20030129-0002 Description ------------ The reporter ...

SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration

SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration source: https://www.securityfocus.com/bid/6684/info It has been reported that the Sygate Pro firewall permits traffic originating from UDP source port 137 or 138 by default. This may allow a remote attacker to bypass...

SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration

source: https://www.securityfocus.com/bid/6684/info It has been reported that the Sygate Pro firewall permits traffic originating from UDP source port 137 or 138 by default. This may allow a remote attacker to bypass the firewall. nmap -vv -P0 -sU %victimsipaddress% -g 137...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...