Generic Botnet Server Detection (ddos) (deprecated)

Binary data 3135.prm...

w32.spybot.fcd Worm Infection Detection

The remote system is infected with a variant of the worm w32.spybot.fcd. Infected systems will scan systems that are vulnerable in the same subnet in order to spread, creating a botnet that has been used for purposes such as DDoS attacks. This script was written by Jorge E Rodriguez - check the...

Mandrake Linux Security Advisory : postfix (MDKSA-2003:081)

Two vulnerabilities were discovered in the postfix MTA by Michal Zalewski. Versions prior to 1.1.12 would allow an attacker to bounce- scan private networks or use the daemon as a DDoS Distributed Denial of Service tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

Postfix < 2.0 Multiple Vulnerabilities

The remote host is running a version of Postfix that is as old as or older than 1.1.12. There are two vulnerabilities in this version that could allow an attacker to remotely disable it, or to be used as a DDoS agent against arbitrary hosts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

CVE-2003-0468

Summary of the CVE-2003-0468 family (Postfix) : The issue affects Postfix versions up to 1.1.11 (and variants discussed in 1.1.x line) and enables a remote attacker to perform bounce-scans or use the MTA as a DoS/DDoS tool by causing SMTP connections to target hosts via crafted addresses. Public ...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

DSA-363 postfix - denial of service, bounce-scanning

Bulletin has no description...

ccbill.txt

Date: Thu, 03 Jul 2003 12:46:39 -0400 From: Dayne Jordan Subject: Another overflow exploit for Apache? RESOLVED Greetings again, We found that this exploit was NOT a result of an Apache exploit. After waiting for the culprits to attempt their mischeif again, we were waiting and watched as they...

Multiple game servers DDoS attacks

Large UDP response is sent in reply to short request withous session setup...

Master Servers: yet another DDoS...

Yeah, seems that DDoS attacks will never die and in these months seems that every game can be used for launch DDoS attacks... This time I want to show a problem that, for me, is very obvious but I have not found any reference to it on Internet. The following is my advisory about the problem:...

Multiple bugs in Unreal engine

It's possble to use game servers for DDoS, game session spoofing, integer type overflows, unreal:// URL handling problems...

PivX Multi-Vendor Game Server dDoS Advisory

Mike Kristovich, PivX Security Advisory MK001 Date: November 26, 2002 Released: January 16, 2002 Application: Battlefield 1942 Server and Dedicated Server America's Army Unreal Tournament 2003 and more.. see section 2. Version: All up to current. Bug: Server status port replies to spoofed UDP...

GameSpy 3D Based Games Spoofed UDP Response Amplification DDoS

The remote host is running a GameSpy server. This service is used to host a gaming server. Since it uses UDP as its transport layer and sends multiple UDP packets in response to one request, an attacker can abuse it to flood a third-party host with traffic by sending a spoofed UDP packet with the...

UT DDoS risk

Application: Unreal Tournament Win version, Linux and Mac not tested Version: all the version 436 vulnerable too Bug: UT servers send a great number of packets to every host that send only 1 packet to them, for 2 min and 30 sec Risk: UT servers used as flooders, DDoS risk Author: Auriemma Luigi...

CVE-2000-0619

The CVE-2000-0619 entry concerns Top Layer AppSwitch 2500, where remote attackers can cause a denial of service by sending malformed ICMP packets. Documents consistently describe the affected product and the impact (availability disruption) but do not provide exploit details, affected versions, o...

CVE-2001-0750

CVE-2001-0750 affects Cisco IOS 12.1(2)T and 12.1(3)T. A remote attacker can cause a denial of service (reload) by connecting to TCP ports 3100–3999, 5100–5999, 7100–7999, or 10100–10999. The issue is triggered by a scanner making connections to these ports, leading to a reload of the router (mem...