Multiple Vendor FTPD on Windows Floppy Request CPU Consumption DoS

It is possible for a remote user to cause a denial of service on a host running Serv-U FTP Server, G6 FTP Server or WarFTPd Server. Repeatedly submitting an 'a:/' GET or RETR request, appended with arbitrary data, will cause the CPU usage to spike to 100%. Nessus identified the remote server as...

CVE-2001-0666

Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...

[ASGUARD-LABS] TYPSoft FTP Server v0.95 STOR/RETR Denial of Service Vulnerability

-00 ASGUARD LABS ADVISORY 00- :Summary: Release Date : 2001-10-04 Affected : TYPSoft FTP Server v0.95 Not Affected : - Attack Type : Denial Of Service Credits to : Jan Wagner :Description: The TYPSoft FTP Server v0.95 contains a simple D.O.S. which affects the "RETR" and "STOR" Command. :Detail: ...

CVE-2001-1156

TYPSoft FTP 0.95 allows remote attackers to cause a denial of service CPU consumption via a "../../" argument to 1 STOR or 2 RETR...

Security Bulletin MS01-049

---------------------------------------------------------------------- Title: Deeply-nested OWA Request Can Consume Server CPU Availability Date: 26 September 2001 Software: Exchange 2000 Impact: Denial of Service Bulletin: MS01-049 Microsoft encourages customers to review the Security Bulletin...

DoS против OWA в Exchange (nested request)

Запрос с большим уровнем вложенности приводит к высокому потреблению процессорного времени...

CVE-1999-1016

Microsoft HTML control as used in 1 Internet Explorer 5.0, 2 FrontPage Express, 3 Outlook Express 5, and 4 Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service 100% CPU consumption via large HTML form fields such as text inputs in a table cell...

CVE-2001-1405

Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service CPU consumption via a flood of requests to sanitycheck.cgi...

CVE-2001-0965

glFTPD 1.23 allows remote attackers to cause a denial of service CPU consumption via a LIST command with an argument that contains a large number of asterisk characters...

[ASGUARD-LABS] glFTPD v1.23 DOS Attack

-00 ASGUARD LABS ADVISORY 00- :Summary: Release Date : 2001-08-17 Affected : glFTPD for Linux v1.23 / glFTPD BSD v1.23 bins Not Affected : glFTPD for Linux v1.24 / glFTPD BSD v1.24 bins Attack Type : Denial Of Service Credits to : Jan Wagner :Description: The glFTPD v1.23 contains a veryx2 simple...

CVE-2001-1055

The Microsoft Windows network stack allows remote attackers to cause a denial of service CPU consumption via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke...

ID Software Quake 3 - SMURF Denial of Service

ID Software Quake 3 - SMURF Denial of Service // source: https://www.securityfocus.com/bid/3060/info Quake 3 network play features contain a remotely exploitable denial of service vulnerability. A hostile client program can be used by to generate a large number of forged client queries on behalf ...

Lotus Domino vulnerable to DoS via large crafted URL request

Overview The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial of service. Description HTTP requests to TCP port 80 consisting of multiple /'s, approximately 8k worth, will result in the consumption of the CPU 99-100%. Typically, 8k of the character "a" results in...

Raptor Firewall 4.0/5.0/6.0.x - Zero Length UDP Packet Resource Consumption

source: https://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered. When the firewall receives zero length UDP packets, the machine hosting...

Oracle8 denial of service

Hi! Attached is a little perl-script, which makes TNSLSNR80.EXE consume all available cpu-time so the computer becomes unusable. It works on Oracle 8 servers running Windows NT 4.0 SP6 and does not require any authentication credentials to succeed. I have not tried it on any other versions or...

def-2001-01: ImageCast IC3 Control Center DoS

====================================================================== Defcom Labs Advisory def-2001-01 ImageCast IC3 Control Center DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-08 ======================================================================...

DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0011.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0012: BufferOverrun in HP Openview Network Node Manager v6.1

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

Nasty XFree Xserver DoS

Hi, Here's a very interesting DoS which I discovered against XFree86-3.3.5. I've had confirmation it also affects 3.3.6 and 4.0 with a small difference, see below SUMMARY ======= Remote users can, by sending a malformed packet to port 6000 TCP, cause a victim X server to freeze for a couple of...