CVE-1999-0956

Affected software: NeXT NetInfo. Vulnerable component: the _writers property, whose misbehavior enables privilege escalation and DoS. Root cause / details: described as a problem with the writers property leading to local access exploitation. Impact: local users could gain root privileges or caus...

CVE-1999-0275

CVE-1999-0275 denotes a DoS in Windows NT DNS servers caused by flooding UDP/port 53 with an excessive number of characters in requests. Affected component: Windows NT DNS service; root cause: character-saturated requests overwhelm the DNS server, leading to service disruption. Documented impact:...

roverpop3.dos.txt

Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt USSR Advisory Code: USSR-99025 Release Date: December 27, 1999 1/5 Systems Affected: Rover POP3 Server V1.1 NT and possibly others versions. About The Software: Rover POP3 Server V1.1 NT From aVirt, is a full-featured...

goodtech.telnet.dos.txt

Remote DoS Attack in GoodTech Telnet Server NT v2.2.1 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in GoodTech Telnet Server NT v2.2.1, the buffer overflow is caused by a long user name 23870 characters. There is not much to expand on.... just a simple hole Example: gimmemore@itsme$...

bisonware.ftp.3.5.txt

Remote DoS Attack in BisonWare FTP Server V3.5 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in BisonWare FTP Server V3.5, the buffer overflow is caused by a long user name, 2000 characters, There is not much to expand on.... just a simple hole Example: Go to:...

vftpd.txt

Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in Vermillion FTP Daemon VFTPD v1.23, The buffer overflow is caused by a 3 times long cwd, 504 characters, Example: gimmemore@itsme$ telnet example.com 21 Trying example.com...

zetamail-2.1.txt

Remote D.o.S Attack in ZetaMail 2.1 Mail POP3/SMTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in ZetaMail 2.1 Mail POP3/SMTP Server, the buffer overflow is caused by a long user name/password, 3500 characters. There is not much to expand on.... just a simple hole Exampl...

Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service

Microsoft SQL Server 7.07.0 SP1 - NULL Data Denial of Service // source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception...

Microsoft SQL Server 7.0/7.0 SP1 - NULL Data Denial of Service

// source: https://www.securityfocus.com/bid/817/info If Microsoft SQL Server 7.0 receives a TDS header with three or more NULL bytes as data it will crash. The crash will generate an event in the log with ID 17055 "fatal exception EXCEPTIONACCESS VIOLATION". / sqldos.c -- a DoS attack agains MS...

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow (1)

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/787/info There is a buffer overflow in the HELO command of the smtp gateway which ships as part of the VirusWall product. This buffer overflow could be used to launch arbitrary code ...

bftelnet.dos.txt

Remote DoS Attack in BFTelnet Server v1.1 for Windows NT PROBLEM UssrLabs found a Remote DoS Attack in BFTelnet Server v1.1 for Windows NT, the buffer overflow is caused by a long user name 3090 characters. If BFTelnet Server is running as a service the service will exit and no messages are...

Sambar_DoS.txt

While testing the security of the Sambar HTTP-Server I found it vulnerable to a simple DOS attack. Sending a "GET XXXX...a lot of Xs..XXXX HTTP/1.0" crashes the Server. It will die WITHOUT logging the attack. My testing-environment: Sambar 4.2.1 M$IE 5.0 de Windows 95 C de Sample exploit code...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow // source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

// source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands "list", "retr" .uidl" and "user" and the SMTP command "vrfy", ...

CVE-1999-0221

CVE-1999-0221 concerns Denial of Service against Ascend routers via remote admin port 150. Connected sources confirm the issue affects Ascend routers and is triggered through port 150, with the Red Hat advisory repeating the DoS description. The PT-1999-1015 entry reiterates the vulnerability nam...

CVE-1999-0441

CVE-1999-0441 describes a denial-of-service condition in WinGate devices caused by a buffer overflow in the Winsock Redirector Service. The vulnerability enables remote attackers to disrupt WinGate machines; the description does not specify affected versions, vectors, or exploit details beyond th...

iis4_remote_DoS.txt

Subject: IIS 4.0 remote DoS MS99-029 To: [email protected] Hi, I found a kind of DoS attack against IIS 4.0 on NT SP4 & SP5. I reported it to MS and they've provided HotFix for this. Problem Description ------------------- Simple play. I sent lots of "Host:aaaaa...aa" to IIS like... GET /...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...

aim-warning-DoS.txt

Date: Fri, 6 Nov 1998 01:46:17 -0600 From: [email protected] To: [email protected] Subject: various lame DoS attacks Aleph, None of this is as cool as finding buffer overflows in sshd, but it may be of interest to some people. 1 DoS attack against people using AOL This DoS attack come...