[SECURITY] [DSA-104-1] CIPE DoS attack

Package : cipe Problem type : DoS attack Debian-specific: no Larry McVoy found a bug in the packet handling code for the CIPE VPN package: it did not check if a received packet was too short and could crash. This has been fixed in version 1.3.0-3, and we recommend that you upgrade your cipe...

Переполнение буфера и DoS в SSDP/UpNP в Windows ME

Сервис вылетает при неправильных данных в порт TCP/5000. Переполнение буфера при разборе UDP-датаграммы порт 1900...

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow (1)

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow 1 // source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, ...

DoS против Denicomp REXECD/RSHD (buffer overflow)

Длинная страка в порт сервиса приводит к его зависанию...

UDP DoS attack in Win2k via IKE

UDP DoS in Win2k via IKE PROBLEM ======= A DoS attack can be carried out on Win2k machines running IKE internet key exchange by sending flooding IKE with UDP packets. This can cause the machine to lock up and render 99 of the CPU. EXPLOIT ====== Connect to port 500 IKE of the Win2k box and start...

CVE-2001-0827

The Cerberus FTP server (versions 1.0 through 1.5 ) is vulnerable to a denial of service (DoS) attack. A remote attacker can cause the server to crash by sending a large volume of "PASV" requests. This issue is categorized as Uncontrolled Resource Consumption (CWE-400 ). To mitigate the risk, it ...

DoS против Windows NT/2000 через Terminal Service (Invalid RDP Data, memory leak)

Определенная последовательность RDP-пакетов приводит к полному зависанию сервера, имеются утечки памяти...

CVE-2001-0794

CVE-2001-0794 : The connected sources indicate a buffer overflow in the A-FTP Anonymous FTP Server triggered by a long USER command, causing a denial of service. The impact is described as partial availability. No versions, vendor, or detailed root-cause fixes are provided in the documents, and t...

CVE-2001-0790

Specter IDS versions 4.5 and 5.0 are affected by a remote DoS vulnerability: a port scan can cause the server to exhaust CPU while preparing alerts. The CVE entry confirms the issue originates from Specter IDS, with impact described as CPU exhaustion (availability impact). No specific remediation...

DoS против 3COM HomeConnect (buffer overflow)

Переполнение буфера при длинной строке запроса к Web-интерфейсу...

CVE-2001-0388

CVE-2001-0388 concerns the time server daemon, timed. The Mandrake advisory (MDKSA-2001:034) states a bug in timed can be triggered remotely to crash the time server daemon, enabling a remote denial-of-service. The advisory references the affected Mandrake/Linux packages and provides upgrade inst...

CVE-2001-0348

CVE-2001-0348 affects Microsoft Windows 2000 Telnet Service. A vulnerability in range checking on incoming Telnet session requests can be exploited by sending a long logon sequence including delete (backspace) characters to crash the Telnet Service, causing a denial of service. Microsoft addresse...

Новая DoS атака - simultation close

Отправка FIN+ACK пакета в обе стороны соединения приводит к переходу обеих сторон в состояние CLOSE-WAIT с постоянным обменом ACK пакетами...

CVE-1999-1265

The CVE-1999-1265 entry affects the SLmail SMTP server (3.1 and earlier). The root cause is processing malformed commands beginning with a "(" character, e.g., SEND, VRFY, EXPN, MAIL FROM, RCPT TO, leading to a denial of service. The provided documents do not specify a patch or workaround. Exploi...

CVE-1999-1532

CVE-1999-1532 affects Netscape Messaging Server versions 3.54–3.6. The issue arises when processing a series of long RCPT TO commands, allowing a remote attacker to trigger a denial of service by exhausting memory. The available documents do not provide exploits, affected platform specifics beyon...

CVE-1999-1404

Summary of CVE-1999-1404: IBM/Tivoli OPC Tracker Agent version 2 release 1 is affected. The vulnerability allows remote attackers to cause a denial of service (resource exhaustion) by sending malformed data to the localtracker client port (5011), preventing the connection from being closed proper...

CVE-1999-1151

CVE-1999-1151 affects the Compaq/Microcom 6000 Access Integrator. The issue is that the device does not time out sessions after prompting for credentials, enabling remote parties to cause a denial of service by connecting without providing a username or password. The provided documents do not spe...

CVE-1999-1254

Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-2000-1194

The provided documents describe CVE-2000-1194 affecting Argosoft FRP server 1.0. An attacker can remotely cause a denial of service and potentially execute arbitrary commands by sending an excessively long string in the USER or CWD commands, indicating a likely input handling/buffer issue. The en...

CVE-1999-1343

The CVE concerns the HTTP server used by Xerox DocuColor 4 LP. The vulnerability arises in the HTTP server’s handling of URLs: a crafted long URL containing a large number of dot characters can cause the server to hang, resulting in a denial of service. Affected component: the HTTP server for Doc...