CVE-1999-1336

The CVE-1999-1336 entry concerns a vulnerability in 3Com HiPer Access Router Card (HiperARC) versions 4.0–4.2.29 that allows a remote attacker to cause a denial of service (reboot) by flooding the telnet port with IAC packets. The cited sources confirm the affected device family and the attack ve...

CVE-1999-1203

CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...

CVE-2001-0706

CVE-2001-0706 affects Maximum Rumpus FTP Server (2.0.3 and earlier). The issue is a denial-of-service (crash) trigger when an FTP mkdir command specifies a large number of sub-folders. The provided sources identify the vulnerable component and the impact but do not include a documented fix or pat...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-2000-0593

WinProxy 2.0 and 2.0.1 are affected. A remote attacker can cause a denial of service by sending an HTTP GET request without specifying an HTTP version. This vulnerability is cataloged as CVE-2000-0593 with a NVD base score of 5.0 (Medium) and an availability impact of Partial. The available recor...

CVE-2000-0290

The CVE-2000-0290 entry concerns the Webstar HTTP server. Vulnerability: a buffer overflow in the HTTP server that is triggered by a long GET request, enabling remote attackers to cause a denial of service. Affected component: Webstar HTTP server (specific versions not provided in the documents)....

CVE-2001-0546

The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...

CVE-2001-0018

The CVE-2001-0018 entry affects Windows 2000 domain controllers (Windows 2000 Server, Advanced Server, or Datacenter Server). It describes a denial-of-service vulnerability caused by remote attackers sending a flood of malformed service requests to the DC, leading to partial availability impact. ...

CVE-2001-0545

CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier is affected. A remote attacker can trigger a denial of service by sending a sequence of large ICMP ECHO REPLY (ping) packets that causes the device to enter ROMMON mode and stop forwarding packets. Affected component is the CBOS software on Cisco devices; the root cau...

CVE-1999-1205

CVE-1999-1205 affects nettune on HP-UX 10.01 and 10.00 where nettune is installed with setuid root, enabling a local attacker to modify critical networking configuration and cause a denial of service. The underlying cause is the risky setuid configuration of nettune, leading to elevated privilege...

CVE-2001-0007

CVE-2001-0007 refers to a buffer overflow in NetScreen Firewall WebUI (ScreenOS) that allows remote DoS via an oversized URL. Exploitation crashes the firewall without login; reboot needed. Affected: various ScreenOS releases; fixed in: ScreenOS 1.73r2 (NetScreen-1000), 2.01r7 (NetScreen-10/100),...

DoS против SphereServer/Ultima Online

Нет таймаута на соединение до проверки имени пользователя и ограничения числа коннектов с одного IP...

Special device access in The Bat!

Topic: Special device access in The Bat! Author: 3APA3A Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat! has special device access bug. If The...

CVE-2001-1033

The CVE-2001-1033 entry describes a vulnerability in Compaq TruCluster 1.5 where remote attackers can trigger a denial of service by performing a port scan from a system lacking a DNS PTR record, causing the cluster to enter a split-brain state.

NetScreen ScreenOS 2.6 Subject to Trust Interface DoS

Problem: NetScreen ScreenOS 2.6.1 subject to Trust Interface DoS Attack Company Info: NetScreen Technologies are the manufacturers of some of the industry's highest quality VPN and firewall equipment. For more information please see http://www.netscreen.com. What's affected: The ScreenOS is the...

SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446)

Dear, Some of you may be interested in information about Microsoft Q280446 issue patch included into SP2. Just to throw the light on it we've decided to publish information because Microsoft declared the deadline for official Windows NT 4.0 support. Topic: Windows NT/2000 DoS via stream3 flood...

[SECURITY] [DSA-104-1] CIPE DoS attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-104-1 [email protected] http://www.debian.org/security/ Wichert Akkerman January 14, 2002 -...