CVE-2001-0932

The CVE-2001-0932 issue affects Cooolsoft PowerFTP Server 2.03 and is caused by a buffer overflow in processing a long command. This vulnerability could allow remote attackers over the network to cause a denial of service and possibly execute arbitrary code. The provided documents describe the af...

Linksys 'routers', SNMP issues

Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...

ISS Security Alert: Multiple Vulnerabilities in Universal Plug and Play Service

Internet Security Systems Security Alert December 20, 2001 Multiple Vulnerabilities in Universal Plug and Play Service Synopsis: ISS X-Force is aware of multiple vulnerabilities with the Universal Plug and Play Service UPnP included with several Microsoft Windows operating systems. UPnP is a...

CVE-2001-0488

This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...

CVE-2001-0566

CVE-2001-0566 affects Cisco Catalyst 2900XL switches. A remote attacker can cause a denial-of-service by sending an empty UDP packet to UDP port 161 (SNMP) when SNMP is disabled. The vulnerability is tied to handling of unsolicited SNMP traffic even with SNMP disabled, leading to partial availabi...

CVE-2000-0708

Affected product: Pragma Systems TelnetServer 2000, version 4.0. Vulnerability: buffer overflow in the rexec port handling, triggered by a long series of null characters. Impact: remote attacker could cause a denial of service. Exploitation status: not provided in the documents. Remediation: no f...

mstream DDoS Agent Detection

The remote host appears to be running a mstream agent, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool It is very likely that this host has been compromised %NASLMINLEVEL 70300 C Tenabl...

mstream DDoS Handler Detection

The remote host appears to be running a mstream handler, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool It is very likely that this host has been compromised %NASLMINLEVEL 70300 C...

Newsletter 35

RSA Web site defaced Amazon.com, eBay & CNN all targeted with DDoS President Clinton convenes meeting on internet security Infosec professionals like yourself can't afford to miss out on late breaking news, in-depth analysis, product reviews and more in each issue of Information Security Magazine...

CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...

CVE-2000-0138

A system has a distributed denial of service DDOS attack master, agent, or zombie installed, such as 1 Trinoo, 2 Tribe Flood Network TFN, 3 Tribe Flood Network 2000 TFN2K, 4 stacheldraht, 5 mstream, or 6 shaft...

CVE-1999-0349

CVE-1999-0349 is a vulnerability in Microsoft IIS FTP Server where a buffer overflow in the FTP LIST (ls) / NLST handling allows remote attackers to cause a denial of service, and in some cases may execute arbitrary commands. The issue is tied to the IIS FTP service’s command processing and memor...