488 matches found
Fastream NETFile Web / FTP server ftp bounce attack
It's possible to use FTP to bounce data to third party...
CVE-2004-1653
CVE-2004-1653 concerns OpenSSH’s default setting that enables AllowTcpForwarding. The description states that with an anonymous access program such as AnonCVS, remote authenticated users could perform a port bounce, effectively using the SSH server as a proxy to reach internal services. The vulne...
CVE-2004-1653: Undefined Security Weakness
The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...
Debian DSA-363-1 : postfix - denial of service, bounce-scanning
The postfix mail transport agent in Debian 3.0 contains two vulnerabilities : - CAN-2003-0468: Postfix would allow an attacker to bounce-scan private networks or use the daemon as a DDoS tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP address and either receiving ...
WS_FTP Server Multiple Vulnerabilities (Bounce, PASV Hijacking)
According to its version number, the remote WSFTP server is vulnerable to session hijacking during passive connections and to an FTP bounce attack when a user submits a specially crafted FTP command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14599;...
CVE-2000-1203: Undefined Security Weakness
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service CPU consumption by forging an email message with the sender as [email protected] localhost, which causes Domino to enter a mail loop...
CVE-2004-1653
The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...
PT-2004-2559 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program suc...
Multiple ISA server bugs
ISA SP2 closes few security holes: buffer overflow during redirect from denied resource, basic credentials may be sent over an External HTTP connection when SSL is required for published server, FTP bounce attack, handles leak in message screener, etc...
DEBIAN-CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
CVE-2003-0468
Summary of the CVE-2003-0468 family (Postfix) : The issue affects Postfix versions up to 1.1.11 (and variants discussed in 1.1.x line) and enables a remote attacker to perform bounce-scans or use the MTA as a DoS/DDoS tool by causing SMTP connections to target hosts via crafted addresses. Public ...
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
CVE-2003-0468: Undefined Security Weakness
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
Postfix 1.1.x - Denial of Service (2)
Postfix 1.1.x - Denial of Service 2 source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that...
Postfix 1.1.x - Denial of Service (1)
// source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be...
Postfix 1.1.x - Denial of Service (2)
source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be exploited...
[SECURITY] [DSA-363-1] New postfix packages fix remote denial of service, bounce scanning
-------------------------------------------------------------------------- Debian Security Advisory DSA 363-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 3rd, 2003 http://www.debian.org/security/faq -...