linux: information disclosure

A security issue has been found in the Linux kernel's implementation of challenge ACKs as specified in RFC 5961. An attacker which knows a connection's client IP, server IP and server port can abuse the challenge ACK mechanism to determine the accuracy of a normally 'blind' attack on the client o...

Information disclosure

The Amazighmusic aka nl.appsandroo.Amazighmusic application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cisco PIX / ASA multiple security vulnerabilities

TCP ACKs DoS, TLS DoS, instant messenger DoS, HTTPs request parsing DoS, Control-plane ACLs feature bypass...

CVE-2005-3675

The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...

CVE-2005-3675

The CVE-2005-3675 entry describes a TCP vulnerability where an attacker can trigger optimistic ACKs for unseen packets, causing a remote TCP sender to increase its transmission rate and potentially exhaust bandwidth, leading to denial of service. Public details note an amplification effect and Do...

CVE-2005-3675: Undefined Security Weakness

The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...