OSPF Agent Detection

The remote host is running an OSPF Open Shortest Path First agent. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only RFC 1247 / RFC 2328 OSPF v2...

CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...

CVE-2004-0551

Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...

CVE-2004-0551

Cisco CatOS TCP-ACK handling vulnerability (CVE-2004-0551) affects CatOS on Cisco Catalyst switches: 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX. A remote attacker can cause a denial of service (system crash/reload) by sending invalid packets instead of the final ACK in the TCP thr...

CVE-2004-0551

Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...

CVE-2004-0551: Undefined Security Weakness

Cisco CatOS 5.x before 5.520 through 8.x before 8.22 and 8.32GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service system crash and reload by sending invalid packets instead of the final ACK portion of the three-way handshake to the 1 Telnet, 2 HTTP, or 3 SSH...

Cisco CatOS TCP-ACK Remote DoS (CSCec42751, CSCed45576, CSCed48590)

The remote switch is vulnerable to various flaws that could allow an attacker to disable this device remotely by doing a TCP-ACK denial of service attack. This vulnerability is documented with the CISCO bugs ID CSCec42751, CSCed45576 and CSCed48590. C Tenable Network Security include"compat.inc";...

Old FreeBSD versions ECCEflag ipfw protection bypass

ACK packets with ECE flags bypass filtering...

Old IOS versions ACL protection bypass

Packets with RST+ACK flags are not filtered...

Обход блокировок на CISCO раутере при сканировании сети

Проблема жила достаточно долго, но только сейчас удалось найти причину, по которой пакеты от запрещенных нами адресов проникали в локальную сеть. Итак, есть раутер фирмы CISCO с "биосом" IOS tm 2500 Software C2500-F2IN-L, Version 11.211, RELEASE SOFTWARE fc1. Есть правила на раутере, которые...

ipfilter denial of service problem

Below is an ipfilter security issue, and my previous mail to author Darren was bounced back, so I think maybe I should mail it to this mailing list. Overview -- Anytime ipfilter see a packet with ACK bit set without the previous SYN, it will marked it as TCPSESTABLISHED in it's state table, and f...

TCP SYN Denial of Service Exploit (bang.c)

Exploit for bsd platform in category dos / poc ========================================== TCP SYN Denial of Service Exploit bang.c ========================================== / BANG.C Coded by Sorcerer of DALnet FUCKZ to: etech, blazin, udp, hybrid and kdl PROPZ : skrilla, thanks for all your help...

CVE-2002-1071: Undefined Security Weakness

ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services crash via a TCP packet with both the SYN and ACK flags set...

ZYXEL Prestige 642R Router - Malformed Packet Denial of Service

ZYXEL Prestige 642R Router - Malformed Packet Denial of Service source: https://www.securityfocus.com/bid/5034/info ZyXEL 642R routers have difficulties handling certain types of malformed packets. In particular, it is possible to deny services by sending a vulnerable router a SYN-ACK packet. To ...

ZYXEL Prestige 642R Router - Malformed Packet Denial of Service

source: https://www.securityfocus.com/bid/5034/info ZyXEL 642R routers have difficulties handling certain types of malformed packets. In particular, it is possible to deny services by sending a vulnerable router a SYN-ACK packet. To a lesser degree, the router also encounters difficulties when...

Zyxel Prestige DoS

Problems with fragmented packets processing, Syn+fin and Syn+ack packets...

DoS против Windows 2000/NT (stream3 flood)

Флуд из FIN+ACK TCP пакетов приводит к утечке памяти в ядре...

LaBrea Tarpitted Host Detection

This script performs a Labrea tarpit scan, by sending a bogus ACK and ACK-windowprobe to a potential host. It also sends a TCP SYN to test for non-persisting labrea machines. This script was written by John [email protected] See the Nessus Scripts License for details include"compat.inc...

Новая DoS атака - simultation close

Отправка FIN+ACK пакета в обе стороны соединения приводит к переходу обеих сторон в состояние CLOSE-WAIT с постоянным обменом ACK пакетами...

netkill - FIN_WAIT_1 DoS против многих систем

Устанавливаются многочисленные TCP-соединения, в которых после 1го ACK-пакета содержащего запрос к серверу перестают подтверждаться TCP-пакеты. Это приводит к подвисанию соединений в случе HTTP - в фазе FINWAIT1, в других случаях - в Established...