Top Layer Attack Mitigator IPS 5500 DoS

2000 concurrent HTTP sessions causes 100 CPU usage...

Mandrake Linux Security Advisory : cups (MDKSA-2003:001)

iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be...

Mandrake Linux Security Advisory : MySQL (MDKSA-2002:087)

Two vulnerabilities were discovered in all versions of MySQL prior to 3.23.53a and 4.0.5a by Stefan Esser. The first can be used by any valid MySQL user to crash the MySQL server, the other allows anyone to bypass the MySQL password check or execute arbitrary code with the privilege of the user...

brokerFTP.txt

Broker FTP DoS Message Server ------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html SUMMARY Beyond Security's SecurITeam has discovered two security vulnerabilities in the Broker FTP product, these vulnerabilities allow a remo...

Unreal engine: results of my research

After almost 3 months, I have finally decided to release the huge advisory/paper about bugs founded in the Unreal engine and all the relative code for the vulnerabilities exploitation plus some tools that I have written during the reversing of the engine. The link for get the english advisory is:...

PlatinumFTP.txt

Multiple vulnerabilities found in PlatinumFTPserver V1.0.7 PlatinumFTPserver C2002 BYTE/400 LTD Discovered by Dennis Rand http://www.infowarfare.dk ------------------------------------------------------------------------ SUMMARY PlatinumFTPserver simplifies management of all your Ftp clients with...

Multiple bugs in Solaris utils

Local and remoter root compromise via buffer overflows and remote DoS attacks...

CVE-2002-0320

CVE-2002-0320: Buffer overflow in Yahoo! Messenger 5.0 allows a remote attacker to cause a denial of service and possibly execute arbitrary code via a long message or the IMvironment field. The CERT advisories specify a remotely exploitable overflow in the message field and in the IMvironment fie...

CVE-2001-1245

Opera 5.0 for Linux is affected by a denial-of-service vulnerability caused by improper handling of malformed HTTP headers. A remote attacker could trigger a crash, potentially by sending a header whose value matches a MIME header name. The root cause is not detailed beyond this description, and ...

CVE-2000-1111

CVE-2000-1111 affects Telnet Service on Windows 2000 Professional. The issue arises because incomplete connection termination is not handled properly, allowing a remote attacker to trigger a denial-of-service by connecting to the server and providing no input. The public records (NVD, CVE list, E...

BlackIce 2.9 car Latest with patch "DOS attacks with URG Flag Set ARE NOT LOGGED"

Hello I am not sure if I already sent this last week ... Had Server problem. Peace .---------------. / NtWaK0 Advisory +-----------------------------------------------------------------------. : Affected : BlackIce 2.9 car Latest with patch : Type : DOS attacks with URG Flag Set ARE NOT LOGGED :...

DoS против Oracle

Различные проблемы приводят к отказу в обслуживании...

XATO Advisory: Win32 Command-Line Mailers

---------------------------------------------------------------------------- Xato Network Security, Inc. www.xato.net Security Advisory XATO-122000-01 December 12, 2000 - MULTIPLE VENDOR COMMAND-LINE MAILER HOLES - SMTP Command-Line Mailers on Win32 Web Servers...

DoS против Cisco Catalyst

Последовательность неудачных попыток авторизации приводит к утечке памяти в устройстве...

DoS против маршрутизаторов Cayman

Перполнение буфера при длинном имени пользователя и пароле администрирования вызывает перезагрузку маршрутизатора. Кроме того, маршрутизатор умирает при длительном пинге большими пакетами...

DoS против HP Jet Direct

nmap-подобное сканирование портов принтера nmap -sT -PT targetprinterприводит к его краху. Кроме того, к таким же результатам приводит большое количествео случайных данных в порт 515...

ncftpd.txt

Proof of Concept - Security Advisory 02/16/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program NcFTPd Description FTP server commercial Severity Can port anywhere / spoof Synopsis: NcFTPd is a commercial FTP File Transfer Protocol server, in the NcFTP produc...