Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense

Positive Technologies Security Advisory http://www.ptsecurity.com Title: DoS-attack in VisNetic ActiveDefense Date: March, 10 2003 Severity: High Application: VisNetic ActiveDefense 1.3.1 and early Platform: Windows 95/98/ME/NT/2000/XP Vendor Status: Notified, patched I. DESCRIPTION -------------...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2002-0123

The affected product is MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier (and possibly 3.5.3). The vulnerability arises from handling of an excessively long HTTP request, which can be leveraged by a remote attacker to cause a denial of service and potentially execute arbitrary c...

Chindi DoS

Program crashes on receiving large amount of data in TCP/4444 port...

Edonkey DoS

Resources consumption through multiple message dialogs...

Kaspersky Antihacker DoS

By performing attack from spoofed addresses it's possible to block user's access to legitimate sites...

802.11b DoS exploit

While working to develop code for WIDZ that is equivalent to a standard Intrusion Detection system’s RESET or SHUN functionality, an effective 802.11b disruption of service attack has been discovered. I haven’t spotted any other postings so here we go…. FATA-jack - a modified version of the...

Internet Explorer .mht DoS

If executable with MZP signature but without actual data is included, NULL pointer reference occurs...

SECURITY.NNOV: Kaspersky Antivirus DoS

Title: Kaspersky Antivirus DoS Affected: Kaspersky Antivirus 4.0.9.0 Server and Workstation version on Windows NT 4.0 and Windows 2000. Author: ZARAZA [email protected] Vendor: Kaspersky Lab Date: January, 30 2003 Risk: Average Exploitable: Yes Remote: Yes for server versions Vendor Notifie...

CUPS 1.1.x - Negative Length HTTP Header

source: https://www.securityfocus.com/bid/6437/info A vulnerability has been reported for CUPS that if exploited may result in a DoS or the execute of code on affected systems. An attacker can exploit this vulnerability by connecting to a vulnerable system and issuing malformed HTTP headers with ...

Advisory 04/2002: Multiple MySQL vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Multiple MySQL vulnerabilities Release Date: 2002/12/12 Last Modified: 2002/12/12 Author: Stefan Esser [email protected] Application: MySQL = 3.23.53a, = 4.0.5a Severity: Several vulnerabilities within libMySQL could allow remot...

Allied Telesyn Rapier24 DoS

UDP flood causes routing to stop...

web602dir.pl

/usr/bin/perl web602 cezch version driectory tree exploit.. Written by eip aka deadbeat aka AnGrYSQl use IO::Socket; print "\nWeb602 czech version Directory Tee Exploit\n"; if !$ARGV\n"; $host = $ARGV0; $sox = IO::Socket::INET-new Proto="tcp", PeerPort="80", PeerAddr=$host, ; print "Connected..DO...

iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.15.02: http://www.idefense.com/advisory/10.15.02.txt DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone October 15, 2002 I. BACKGROUND RadioBird Software's WebServer 4 Everyone is a free "Powerful,...

CVE-2002-0370

CVE-2002-0370 refers to a buffer overflow/unchecked buffer in ZIP decompression in Windows ZIP handling affecting Windows 98 with Plus! Pack, XP, ME, Lotus Notes R4–R6, Verity KeyView, and StuffIt Expander before 7.0. OpenVAS and Nessus entries corroborate the MS02-054 fix. The vulnerability can ...

Microsoft PPTP Server and Client remote vulnerability

phion Security Advisory 26/09/2002 Microsoft PPTP Server and Client remote vulnerability Summary ----------------------------- The Microsoft PPTP Service shipping with Windows 2000 and XP contains a remotely exploitable pre-authentication bufferoverflow. Affected Systems...

PHP-Nuke x.x SQL Injection

Hello, All PHP-Nuke versions, including the just released 6.0, are vulnerable to a very simple SQL injection that may lead to a basic DoS attack. For instance, if you create a short script, to send a few requests, I have tested with just 6 similar to this:...

Trillian Remote DoS Attack - AIM

Advisory Url: http://www.computersecuritynow.com/modules.php?op=modload&name=News&file=article&sid=817&mode=thread&order=0&thold=0 ComputerSecurityNow Advisory Sep 23 2002 Trillian Remote DoS Attack - AIM Spikeman - spikeman at computersecuritynow dot com http://www.computersecuritynow.com/ Thank...

Apache mod_dav module vulnerable to DoS

Overview A denial-of-service vulnerability exists in Apache moddav. Description moddav is an Apache module. This module enables Apache web servers to provide users the ability to edit and manage files on a remote web server using the HTTP protocol. A vulnerability in moddav may allow an attacker ...

CVE-2001-1389

Concrete details from connected sources show that CVE-2001-1389 affects xinetd up to version 2.3.3, with remote code execution and denial-of-service possibilities caused by buffer overflows and improper NULL termination. The Mandrake advisory confirms patches were applied in the 2.3.1 release, in...