CVE-2007-1103

CVE-2007-1103 affects Tor, where the client does not verify a node’s uptime and bandwidth advertisements. This allows a remote attacker operating a low-resource node to falsely claim greater resources, causing that node to be used in many circuits and potentially compromising the anonymity of tra...

CVE-2007-0539

The wpremotefopen function in WordPress before 2.1 allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint...

CVE-2007-0538: Undefined Security Weakness

Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to 1 a large file, which triggers a long download session without a timeout constraint; or 2 a file with a...

CVE-2007-0540: Undefined Security Weakness

WordPress allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data...

CVE-2007-0539: Undefined Security Weakness

The wpremotefopen function in WordPress before 2.1 allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint...

WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure

WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure source: https://www.securityfocus.com/bid/22220/info WordPress is prone to a denial-of-service vulnerability and an information-disclosure vulnerability. Attackers can exploit these issues to consume memory and...

Packeteer PacketWise CLI overflow DoS

Product: Packeteer PacketShaper Model: 9500/ISP Software: PacketWise 8.x possibly others =========== Background =========== Packeteer creates bandwidth management solutions such as the PacketShaper which "is the ultimate scalable platform for optimized WAN application performance—the only...

CVE-2007-0086

The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by...

CVE-2007-0086

CVE-2007-0086 targets the Apache HTTP Server. The documented effect is a denial of service caused by a Range header that can cause network bandwidth consumption when a TCP connection is opened with a large window size, via multiple copies of the same fragment. The connected documents provide conc...

CVE-2007-0087

Microsoft Internet Information Services IIS, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue...

CVE-2007-0086: Uncontrolled Resource Consumption

The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by...

CVE-2007-0087: Undefined Security Weakness

Microsoft Internet Information Services IIS, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue...

mysource 2.14.82.16 - Multiple Vulnerabilities

mysource 2.14.82.16 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/20153/info MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct...

mysource 2.14.8/2.16 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/20153/info MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct cross-site scripting attacks. An attacker may...

LAN-tapping, anti-tool details-vulnerability warning-the black bar safety net

Editor's Note:This article is the defense of the meaning is greater than the attack. Within the same LAN, using the same type of tools to each other to attack, the result is-Can the Internet! Each other understand, and consciously for the download speed limit,“the harmonious Internet”is the right...

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory

Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...

A new bandwidth attacks-vulnerability warning-the black bar safety net

This document Copyleft owned skipjack all, use the GPL release, you can freely copy, reprint, reproduced keep the documents for completeness, it is strictly prohibited for any commercial purposes. Email: [email protected] Source: http://skipjack.cublog.cn The idea is to...

How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

Build simple hidden crazy ddos attack tools-vulnerability warning-the black bar safety net

xdos attack effect is better, but we have to do is let him as the leader of the zombies above, put in a lot of meat on the chicken run, auto-attack the target server. xdos to run a cmd window, we can use delphi to write a small program to let him hide the window, and to achieve a boot from the...

CVE-2005-3675

The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...