446 matches found
Optimistic TCP acknowledgements can cause denial of service
Overview A vulnerability in the TCP congestion control mechanism could be leveraged by an attacker to cause a denial of service. Description The Transmission Control Protocol TCP is described in RFC 793 as a means to provide reliable host-to-host transmission in a packet-switched computer network...
OSPF Agent Detection
The remote host is running an OSPF Open Shortest Path First agent. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only RFC 1247 / RFC 2328 OSPF v2...
CVE-2002-1712
Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...
CVE-2004-0551
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
CVE-2004-0551
Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...
CVE-2004-0551
Cisco CatOS TCP-ACK handling vulnerability (CVE-2004-0551) affects CatOS on Cisco Catalyst switches: 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX. A remote attacker can cause a denial of service (system crash/reload) by sending invalid packets instead of the final ACK in the TCP thr...
Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)
The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...
Old FreeBSD versions ECCEflag ipfw protection bypass
ACK packets with ECE flags bypass filtering...
Old IOS versions ACL protection bypass
Packets with RST+ACK flags are not filtered...
Обход блокировок на CISCO раутере при сканировании сети
Проблема жила достаточно долго, но только сейчас удалось найти причину, по которой пакеты от запрещенных нами адресов проникали в локальную сеть. Итак, есть раутер фирмы CISCO с "биосом" IOS tm 2500 Software C2500-F2IN-L, Version 11.211, RELEASE SOFTWARE fc1. Есть правила на раутере, которые...
ipfilter denial of service problem
Below is an ipfilter security issue, and my previous mail to author Darren was bounced back, so I think maybe I should mail it to this mailing list. Overview -- Anytime ipfilter see a packet with ACK bit set without the previous SYN, it will marked it as TCPSESTABLISHED in it's state table, and f...
TCP SYN Denial of Service Exploit (bang.c)
Exploit for bsd platform in category dos / poc ========================================== TCP SYN Denial of Service Exploit bang.c ========================================== / BANG.C Coded by Sorcerer of DALnet FUCKZ to: etech, blazin, udp, hybrid and kdl PROPZ : skrilla, thanks for all your help...
ZYXEL Prestige 642R Router - Malformed Packet Denial of Service
ZYXEL Prestige 642R Router - Malformed Packet Denial of Service source: https://www.securityfocus.com/bid/5034/info ZyXEL 642R routers have difficulties handling certain types of malformed packets. In particular, it is possible to deny services by sending a vulnerable router a SYN-ACK packet. To ...
ZYXEL Prestige 642R Router - Malformed Packet Denial of Service
source: https://www.securityfocus.com/bid/5034/info ZyXEL 642R routers have difficulties handling certain types of malformed packets. In particular, it is possible to deny services by sending a vulnerable router a SYN-ACK packet. To a lesser degree, the router also encounters difficulties when...
Zyxel Prestige DoS
Problems with fragmented packets processing, Syn+fin and Syn+ack packets...
DoS против Windows 2000/NT (stream3 flood)
Флуд из FIN+ACK TCP пакетов приводит к утечке памяти в ядре...
LaBrea Tarpitted Host Detection
This script performs a Labrea tarpit scan, by sending a bogus ACK and ACK-windowprobe to a potential host. It also sends a TCP SYN to test for non-persisting labrea machines. This script was written by John [email protected] See the Nessus Scripts License for details include"compat.inc...
Новая DoS атака - simultation close
Отправка FIN+ACK пакета в обе стороны соединения приводит к переходу обеих сторон в состояние CLOSE-WAIT с постоянным обменом ACK пакетами...
netkill - FIN_WAIT_1 DoS против многих систем
Устанавливаются многочисленные TCP-соединения, в которых после 1го ACK-пакета содержащего запрос к серверу перестают подтверждаться TCP-пакеты. Это приводит к подвисанию соединений в случе HTTP - в фазе FINWAIT1, в других случаях - в Established...