1022 matches found
Low BandWidth X proxy vulnerable to buffer overflow via crafted display command line option
Overview A locally exploitable buffer overflow exists in the Low BandWidth X proxy. Description The Low BandWidth X proxy is a component of XFree86 a freely redistributable open-source implementation of the X Window System. The Low BandWidth X proxy allows applications to transparently take...
Macromedia Flash Player continues to download flash files until browser is closed
Overview Macromedia Flash 6 does not terminate connections when a web user leaves the page. These connections may consume excessive amounts of bandwidth and limit the flow of other data. Description The Macromedia Flash media format enables frame-based animations with sound to be viewed within a...
KaZaa v1.7.1 Denial of Service Attack
Submitted by : Josh [email protected], omega [email protected] on July 25th, 2002 Vulnerability : KaZaa Denial of Service Attack Tested On : KaZaa v1.7.1 Remote : Yes Fix : KaZaa v1.7.2 has been released and is a fix for the problem Big Thanks To : SooT for letting me crash your system a lot...
CVE-2001-1244: Undefined Security Weakness
Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...
CVE-2001-0903
The CVE concerns the HDCP system where a linear key exchange process can be exploited to recover plaintext data, evade device blacklists, clone devices, and generate new device keyvectors by computing alternate authentication key combinations. Documents do not specify affected product/vendor vers...
CVE-2001-0903: Undefined Security Weakness
Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...
CVE-2001-0903
Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...
ID Software Quake 3 - 'SMURF' Denial of Service
// source: https://www.securityfocus.com/bid/3060/info Quake 3 network play features contain a remotely exploitable denial of service vulnerability. A hostile client program can be used by to generate a large number of forged client queries on behalf of a target user. The server's responses flood...
MS00-036: NT ResetBrowser frame & HostAnnouncement flood patch (262694)
The hotfix for the 'ResetBrowser Frame' and the 'HostAnnouncement flood' has not been applied. The first of these vulnerabilities allows anyone to shut down the network browser of this host at will. The second vulnerability allows an attacker to add thousands of bogus entries in the master browse...
Eric Allman Sendmail 8.9.1/8.9.3 - ETRN Denial of Service
source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If many ETRN commands are sent to a server, it is possible to...
CVE-1999-0313
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
bandwidthrape.txt
Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping...
macattack-syn-dos.txt
Date: Thu, 08 Oct 1998 21:07:54 -0700 From: Spikeman To: [email protected], [email protected] Subject: MacAttack Unknown if anyone else knows about this or even said anything about it but i didn't see anything so i thought i would say something. You can kill all the bandwidth out of...
NTMail3 Arbitrary Mail Relay
Nessus has detected that the remote SMTP server allows anyone to use it as a mail relay provided that the source address is set to ''. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server...
MTA Open Mail Relaying Allowed
Nessus has detected that the remote SMTP server allows mail relaying. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server blacklisted. C Tenable Network Security, Inc. include'compat.inc'...
CVE-1999-0313
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
Linux Kernel 2.02.1 (Digital UNIX 4.0 D FreeBSD 2.2.4 HP HP-UX 10.2011.0 IBM AIX 3.2.5 NetBSD 1.2 Solaris 2.5.1) - Smurf Denial of Service
Linux Kernel 2.02.1 Digital UNIX 4.0 D FreeBSD 2.2.4 HP HP-UX 10.2011.0 IBM AIX 3.2.5 NetBSD 1.2 Solaris 2.5.1 - Smurf Denial of Service / source: https://www.securityfocus.com/bid/147/info The "Smurf" denial of service exploits the existance, and forwarding of, packets sent to IP broadcast...
Linux Kernel 2.0/2.1 (Digital UNIX 4.0 D / FreeBSD 2.2.4 / HP HP-UX 10.20/11.0 / IBM AIX 3.2.5 / NetBSD 1.2 / Solaris 2.5.1) - Smurf Denial of Service
/ source: https://www.securityfocus.com/bid/147/info The "Smurf" denial of service exploits the existance, and forwarding of, packets sent to IP broadcast addreses. By creating an ICMP echo request packet, with the source address set to an IP within the network to be attacked, and the destination...