Vulnerability in OpenSSL - Invalid GOST parameters DoS Attack

A malicious TLS client can send an invalid set of GOST parameters which will cause the server to crash due to lack of error checking. This could be used in a denial-of-service attack. Only users of the OpenSSL GOST ENGINE are affected by this bug. Found by Andrey Kulikov...

Vulnerability in OpenSSL - DTLS DoS attack

A flaw in the fix to CVE-2011-4108 can be exploited in a denial of service attack. Only DTLS applications are affected. Found by Antonio Martin...

CVE-2011-5036

Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Check Point response to "DoS through hash table against Web Application Platforms" (CVE-2011-4838)

...

SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5344)

This update brings Apache to version 2.2.12. The main reason is the enablement of the Server Name Indication SNI that allows several SSL-enabled domains on one IP address FATE311973. See the SSLStrictSNIVHostCheck directive as documented in /usr/share/apache2/manual/mod/modssl.html.en Also the...

MS11-083 Denial Of Service

No description provided by source. !/bin/sh cat winnuke2011.c EOF / MS11-083 DoS/PoC exploit ======================== This attempts to trigger the ICMP refCount overflow in TCP/IP stack of Win7/Vista/Win2k8 hosts. This requires sending 2^32 UDP packets to a host on a closed port, or 4,294,967,296...

Assassin DoS 2.0.3 - Created By MaxPainCode

Assassin DoS 2.0.3 - Created By MaxPainCode MaxPainCode develop a new dos tool is based on a new attack that uses HTTP Flood to get the site down, this will work if you try with big dedicated server. Another Feature of Assassin DoS is that it will not take all your resources as the most DoS do...

Exploit for Uncontrolled Resource Consumption in Apache Http_Server

PoC exploit for CVE-2011-3192, a Range Header DoS vulnerability...

Linux Kernel TCP Sequence Number Generation Security Weakness

The Linux kernel is prone to a security weakness related to TCP sequence number generation. Attackers can exploit this issue to inject arbitrary packets into TCP sessions using a brute-force attack. An attacker may use this vulnerability to create a denial of service condition or a...

Windows server 2008 R1 local DoS

Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the issue - DoS-only, and server 2008 R...

Microsoft Windows Server 2008 R1 Denial Of Service

Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the issue - DoS-only, and server 2008 R...

AnDOSid the DOS tool for Android

AnDOSid the DOS tool for Android A new product released by SCOTT HERBERT for Android mobile phones,Its AnDOSid - the DOS tool for Android Phones. The rise of groups like Anonymous and LuzSec, as well as constant India / Pakistan cyberwar has raised the issue of cyber-security higher in the minds...

CentOS Update for mysql CESA-2009:1289 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! This is the last advisory in which I'll warn you about new multiple security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. This time I will tell you about Security section of control panel, which is full of vulnerabilities. These are Denial of Service,...

D-Link DSL-2650U - Denial of Service (PoC)

D-Link DSL-2650U - Denial of Service PoC Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

XnView 1.98 Denial Of Service Proof Of Concept

done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5: 0c831c090f5a723d44bb641b175ca0e6 DoS i...

Fedora 13 : xen-3.4.3-3.fc13 (2011-7421)

gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 14 : xen-4.0.1-11.fc14 (2011-6914)

gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Don't require /usr/bin/qemu-nbd as it isn't used at present. Fix issue with VGA passthrough 694001 Note that Tenable Network Security has extracted t...

Mandriva Update for pure-ftpd MDVSA-2011:094 (pure-ftpd)

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Mandriva Update for pure-ftpd MDVSA-2011:094 pure-ftpd Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora 15 : xen-4.1.0-2.fc15 (2011-6859)

Overflows in kernel decompression can allow root on xen PV guest to gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Don't require /usr/bin/qemu-nbd as it isn't used at present. Note that Tenable...