DoS через Windows NT Task Scheduler

Connet на 127.0.0.1 TCP/1026 или TCP/1027 с последующим дисконнектом приводит к зависанию службы с 99 загрузкой процессора...

UDP Ping-pong in Win2k

Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...

Denial of Service attack against computers running Microsoft NetMeeting

Diversified Software Industries, Inc. www.dsi-inc.net/dsi Security Advisory October 16, 2000 Denial of Service attack against computers running Microsoft NetMeeting 1. Description 2. Steps to reproduce exploit 3. Vendor status and solution 4. Disclaimer 5. Credits 6. About DSI...

VIGILANTE-2000009.txt

"Invalid URL" DoS Advisory Code: VIGILANTE-2000009 Release Date: September 6, 2000 Systems Affected: - Internet Information Server 4.0 for Windows NT 4.0 - Possibly Windows NT 4.0 in general read Microsoft's note THE PROBLEM A certain series of requests can cause INETINFO.EXE to gradually consume...

VIGILANTE-2000008.txt

NTMail Configuration Service DoS Advisory Code: VIGILANTE-2000008 Release Date: September 4, 2000 Systems Affected: - NTMail V5 Alpha Processor - NTMail V5 Intel Processor - NTMail V6 Alpha Processor - NTMail V6 Intel Processor THE PROBLEM The web configuration running on TCP port 8000 does not...

MS00-029: NT IP Fragment Reassembly Patch Not Applied (jolt2) (259728)

The hotfix for the 'IP Fragment Reassembly' vulnerability has not been applied on the remote Windows host. This vulnerability allows an attacker to send malformed packets, which will utilize 100% of the computer CPU, making it nearly unusable for the legitimate users. C Tenable Network Security,...

Check Point Software Firewall-1 4.01 4.1 - Fragmented Packets Denial of Service

Check Point Software Firewall-1 4.01 4.1 - Fragmented Packets Denial of Service // source: https://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available...

Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service

Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's...

CVE-2000-0204

The CVE-2000-0204 entry concerns the Trend Micro OfficeScan client. It describes a denial-of-service condition triggered by remote attackers making 5 connections to port 12345, causing CPU utilization to reach 100%. The provided documents do not specify the underlying root cause, affected version...

HP OpenView OmniBack II 2.553.03.1 - Denial of Service

HP OpenView OmniBack II 2.553.03.1 - Denial of Service source: https://www.securityfocus.com/bid/1015/info Multiple open connections to port 5555 can cause the HP OpenView OmniBack program to crash by consuming 100% CPU cycles. Closing the connections will not alleviate this problem, therefore a...

IE5.01 Frozes system on huge images

IE5.01 Frozes system on huge images 20.01.2000 Reproducability: Open http://www.security.nnov.ru/files/ie5hang.asp to test vulnerability save you data before : I can reproduce this bug on all PCs with Windows NT 4.0 SP5-6a + IE5, but reaction is different. Reaction can probably depend on type of...

Omni-NFS_DoS.txt

Faulty software --------------- Omni-NFS/X Enterprise version 6.1 Product --------- Omni-NFS/X Enterprise is a X, NFS server solution for win32 systems. It is written by XLink Technology http://www.xlink.com . Vulnerability ------------- The nfs daemon nfsd.exe used by Omni-NFS/X will jump to 100...

Microsoft Internet Explorer 5 - HTML Form Control Denial of Service

Microsoft Internet Explorer 5 - HTML Form Control Denial of Service Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 HTML Form Control DoS source: https://www.securityfocus.com/bid/606/info Certain Microsoft applications IE5, Outlook Express 5 are unable to display large HTM...

RPC rstatd Service Detection

The remote host is running the rstatd RPC service. This service provides information such as : - the CPU usage - the system uptime - the network usage C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10227; scriptversion"1.34"; scriptcvsdate"Date: 2019/10/04 16:48:26";...

oracle8-tnslsnr-DoS.txt

Oracle8 TNSLSNR DoS Jason Ackley [email protected] Mon, 28 Dec 1998 16:21:20 -0800 Greetings, I hope everyone had happy holidays with the IOS and Sun bugs, but now its time to get back to business.. Ohhh OK, one more DoS ! : Hopefully this is new, I searched the archives for 'tns' and 'oracle', bu...

vintra.txt

From: Vytis Fedaravicius Subject: DOS in Vintra systems Mailserver software. Hello, There is a bug in a free MailServer software for Windows NT from Vintra systems http://www.vintra.com/mailsrvr.html . Any remote user can cause MTA to go nuts and make CPU ussage up to 99%, eat all available memor...

slmail3.1.txt

Date: Thu, 4 Feb 1999 13:51:32 -0800 From: Marc To: [email protected] Subject: Multiple SLMail Vulnerabilities eEye Digital Security Team www.eEye.com [email protected] February 04, 1999 Multiple SLMail Vulnerabilities Systems Affected SLMail 3.1 Release Date February 04, 1999 Advisory...

oracle-8-NERP-DoS.txt

Date: Thu, 7 Jan 1999 17:31:13 -0800 From: Jason Ackley To: [email protected] Subject: Re: Fw:"NERP" DoS attack possible in Oracle On Wed, 6 Jan 1999, Paul Schenk wrote: In fact, on HP-UX 10.20, Oracle 7.3.3, in listener.log you get: 06-JAN-99 16:15:45 12569 TNS-12569: TNS:packet checksum...

CVE-1999-1567

Seapine Software TestTrack server allows a remote attacker to cause a denial of service high CPU via 1 TestTrackWeb.exe and 2 ttcgi.exe by connecting to port 99 and disconnecting without sending any data...

Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/503/info The IMail ldap service has an unchecked buffer, resulting in a classic buffer overflow vulnerability. While it does not crash the service, it drives CPU utilization up rendering the system essentially unusable. Telnet to target machine, port 389...