3490 matches found
CVE-2001-0007
CVE-2001-0007 refers to a buffer overflow in NetScreen Firewall WebUI (ScreenOS) that allows remote DoS via an oversized URL. Exploitation crashes the firewall without login; reboot needed. Affected: various ScreenOS releases; fixed in: ScreenOS 1.73r2 (NetScreen-1000), 2.01r7 (NetScreen-10/100),...
CVE-2001-0018
The CVE-2001-0018 entry affects Windows 2000 domain controllers (Windows 2000 Server, Advanced Server, or Datacenter Server). It describes a denial-of-service vulnerability caused by remote attackers sending a flood of malformed service requests to the DC, leading to partial availability impact. ...
CVE-2001-0558
CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...
CVE-1999-1478
The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...
CVE-2001-0545
CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...
CVE-2001-0546
The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...
CVE-1999-1203
CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...
DoS против SphereServer/Ultima Online
Нет таймаута на соединение до проверки имени пользователя и ограничения числа коннектов с одного IP...
Special device access in The Bat!
Topic: Special device access in The Bat! Author: 3APA3A Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat! has special device access bug. If The...
CVE-2001-1033
The CVE-2001-1033 entry describes a vulnerability in Compaq TruCluster 1.5 where remote attackers can trigger a denial of service by performing a port scan from a system lacking a DNS PTR record, causing the cluster to enter a split-brain state.
NetScreen ScreenOS 2.6 Subject to Trust Interface DoS
Problem: NetScreen ScreenOS 2.6.1 subject to Trust Interface DoS Attack Company Info: NetScreen Technologies are the manufacturers of some of the industry's highest quality VPN and firewall equipment. For more information please see http://www.netscreen.com. What's affected: The ScreenOS is the...
SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446)
Dear, Some of you may be interested in information about Microsoft Q280446 issue patch included into SP2. Just to throw the light on it we've decided to publish information because Microsoft declared the deadline for official Windows NT 4.0 support. Topic: Windows NT/2000 DoS via stream3 flood...
[SECURITY] [DSA-104-1] CIPE DoS attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-104-1 [email protected] http://www.debian.org/security/ Wichert Akkerman January 14, 2002 -...
[SECURITY] [DSA-104-1] CIPE DoS attack
Package : cipe Problem type : DoS attack Debian-specific: no Larry McVoy found a bug in the packet handling code for the CIPE VPN package: it did not check if a received packet was too short and could crash. This has been fixed in version 1.3.0-3, and we recommend that you upgrade your cipe...
Переполнение буфера и DoS в SSDP/UpNP в Windows ME
Сервис вылетает при неправильных данных в порт TCP/5000. Переполнение буфера при разборе UDP-датаграммы порт 1900...
Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow (1)
Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow 1 // source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, ...
DoS против Denicomp REXECD/RSHD (buffer overflow)
Длинная страка в порт сервиса приводит к его зависанию...
UDP DoS attack in Win2k via IKE
UDP DoS in Win2k via IKE PROBLEM ======= A DoS attack can be carried out on Win2k machines running IKE internet key exchange by sending flooding IKE with UDP packets. This can cause the machine to lock up and render 99 of the CPU. EXPLOIT ====== Connect to port 500 IKE of the Win2k box and start...
CVE-2001-0827
Cerberus FTP server versions 1.0–1.5 are affected by a vulnerability that allows remote denial of service (crash) via a high volume of PASV requests. The NVD entry CVE-2001-0827 confirms the issue and impact (availability loss). Several connected sources reference the same description, with PT-20...