Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests

Overview Intruders can disrupt the normal operation of an IIS 5.0 server using a malicious Web Distributed Authoring and Versioning WebDAV request. Description WebDAV is an extension to HTTP used to manage content on web servers. Quoting from RFC 2518: WebDAV is an extension to the HTTP/1.1...

Security Advisory: CBOS Web-based Configuration Utility Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS Web-based Configuration Utility Vulnerability ====================================================================== Revision 1.0 For Public Release 2001 August 23 20:00 UTC -800...

DoS против PCAnywhere (connection flood)

Большое число запросов на соединение приводит к отказу в обслуживании...

DoS против XFree-xfs

Большое количество случайных данных в порт приложения приводит к отказу в обслуживнаии...

CVE-2001-0328

CVE-2001-0328 describes a vulnerability in TCP initial sequence number (ISN) generation where random increments can enable remote attackers to hijack sessions or disrupt traffic by sending a flood of packets with varying ISNs. Connected documents show this is discussed across multiple UNIX system...

CVE-2001-0328: Undefined Security Weakness

TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...

Cisco IOS/CatOS exposes read-write SNMP community string via traversal of View-based Access Control MIB (VACM) using read-only community string

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read and modify its configuration, creating a denial-of-service condition, an information leak, or both...

Cisco IOS/X12-X15 has default SNMP read/write string of "cable-docsis"

Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read and modify its configuration, creating a denial-of-service condition, an information leak, or both...

GoAhead Web Server 2.1 (Windows) - Denial of Service

GoAhead Web Server 2.1 Windows - Denial of Service source: https://www.securityfocus.com/bid/2607/info The GoAhead Web Server is a freely available, open source software package developed by GoAhead. The GoAhead Web Server offers a multi-platform web server and source code to the community. A...

DoS против Cisco VPN 3000 (ip option)

Исопльзуя некорректные ip options можно вызвать отказ маршрутизатора в пределах локального сегмента...

DoS против BinTec X4000 (SYN scan)

SYN-Пакет в порт 1723 pptp вызывает отказ в обслуживании...

Security Advisory: FreeBSD-SA-01:13.sort

============================================================================= FreeBSD-SA-01:13 Security Advisory FreeBSD, Inc. Topic: sort uses insecure temporary files Category: core Module: sort Announced: 2001-01-29 Credits: Discovered during internal auditing Affects: FreeBSD 3.x all releases...

MS01-003: Winsock2ProtocolCatalogMutex Mutex Local DoS (279336)

By default, Windows NT sets weak permissions on the Winsock mutex. A local user without any privilege may abuse these permissions to lock the mutex indefinitely and, therefore, disrupt the network operations of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

ISC BIND 4 contains buffer overflow in nslookupComplain()

Overview The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS by the Internet Software Consortium ISC. There is a buffer overflow vulnerability in BIND 4.9.x, which may allow remote intruders to gain access to systems running BIND. Although BIND 4.9.x is no...

FreeBSD-SA-01:13.sort

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:13 Security Advisory FreeBSD, Inc. Topic: sort uses insecure temporary files Category: core Module: sort Announced: 2001-01-29 Credits: Discovered during internal auditin...

Локальный DoS против Windows NT (mutex)

Пользователь может захватить все mutex-объекты, после чего другие приложения не смогут работать с сетью...

Watchguard SOHO 2.2 - Denial of Service

source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to execute a Denial of Service attack on th...

DoS против NetBIOS/TCP/IP - NBT flood

Постоянная отправка намеренно поврежденных пакетов приводит к отказу в обслуживании NetBIOS - клиентов...

Evolvable Shambala Server 4.5 - Denial of Service

Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...

Microsoft Security Bulletin (MS00-062)

Microsoft Security Bulletin MS00-062 - -------------------------------------- Patch Available for "Local Security Policy Corruption" Vulnerability Originally posted: August 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000...