roverpop3.dos.txt

Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt USSR Advisory Code: USSR-99025 Release Date: December 27, 1999 1/5 Systems Affected: Rover POP3 Server V1.1 NT and possibly others versions. About The Software: Rover POP3 Server V1.1 NT From aVirt, is a full-featured...

goodtech.telnet.dos.txt

Remote DoS Attack in GoodTech Telnet Server NT v2.2.1 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in GoodTech Telnet Server NT v2.2.1, the buffer overflow is caused by a long user name 23870 characters. There is not much to expand on.... just a simple hole Example: gimmemore@itsme$...

bisonware.ftp.3.5.txt

Remote DoS Attack in BisonWare FTP Server V3.5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in BisonWare FTP Server V3.5, the buffer overflow is caused by a long user name, 2000 characters, There is not much to expand on.... just a simple hole Example: Go to:...

vftpd.txt

Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23, The buffer overflow is caused by a 3 times long cwd, 504 characters, Example: gimmemore@itsme$ telnet example.com 21 Trying example.com...

zetamail-2.1.txt

Remote D.o.S Attack in ZetaMail 2.1 Mail POP3/SMTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in ZetaMail 2.1 Mail POP3/SMTP Server, the buffer overflow is caused by a long user name/password, 3500 characters. There is not much to expand on.... just a simple hole Exampl...

Microsoft SQL Server 7.0/7.0 SP1 - NULL Data Denial of Service

// source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception EXCEPTIONACCESS VIOLATION". / sqldos.c -- a DoS attack agains MS...

Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service

Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service // source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception...

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow (1)

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/787/info There is a buffer overflow in the HELO command of the smtp gateway which ships as part of the VirusWall product. This buffer overflow could be used to launch arbitrary code ...

bftelnet.dos.txt

Remote DoS Attack in BFTelnet Server v1.1 for Windows NT PROBLEM UssrLabs found a Remote DoS Attack in BFTelnet Server v1.1 for Windows NT, the buffer overflow is caused by a long user name 3090 characters. If BFTelnet Server is running as a service the service will exit and no messages are...

Sambar_DoS.txt

While testing the security of the Sambar HTTP-Server I found it vulnerable to a simple DOS attack. Sending a "GET XXXX...a lot of Xs..XXXX HTTP/1.0" crashes the Server. It will die WITHOUT logging the attack. My testing-environment: Sambar 4.2.1 M$IE 5.0 de Windows 95 C de Sample exploit code...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow // source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

// source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands "list", "retr" .uidl" and "user" and the SMTP command "vrfy", ...

CVE-1999-0221

CVE-1999-0221 concerns Denial of Service against Ascend routers via remote admin port 150. Connected sources confirm the issue affects Ascend routers and is triggered through port 150, with the Red Hat advisory repeating the DoS description. The PT-1999-1015 entry reiterates the vulnerability nam...

CVE-1999-0441

CVE-1999-0441 describes a denial-of-service condition in WinGate devices caused by a buffer overflow in the Winsock Redirector Service. The vulnerability enables remote attackers to disrupt WinGate machines; the description does not specify affected versions, vectors, or exploit details beyond th...

iis4_remote_DoS.txt

Subject: IIS 4.0 remote DoS MS99-029 To: [email protected] Hi, I found a kind of DoS attack against IIS 4.0 on NT SP4 & SP5. I reported it to MS and they've provided HotFix for this. Problem Description ------------------- Simple play. I sent lots of "Host:aaaaa...aa" to IIS like... GET /...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...

ipop3d.4.xx.lockfile.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Lockfile vunerability in ipop3d 4.xx The problem is probably well known, but silently ignored by pine vendors. Unfortunately, it's possible to turn 'mostly harmless feature' in something nasty - following code allows various DoSes by...

nukenabber-DoS.txt

------------------------------------ NOTE: NukeNabber 2.9 and earlier are vulnerable. nn29a.exe is NOT vulnerable. ------------------------------------ Date: Fri, 6 Nov 1998 01:46:17 -0600 From: [email protected] To: [email protected] Subject: various lame DoS attacks Aleph, None of...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...