3503 matches found
NSFOCUS SA2001-01: NetScreen Firewall WebUI Buffer Overflow vulnerability
NSFOCUS Security AdvisorySA2001-01 Topic: NetScreen Firewall WebUI Buffer Overflow vulnerability Release DateЈє Jan 9th, 2001 CVE Candidate Numbers: CAN-2001-0007 Affected system: ================ ScreenOS release 1.73r1 on the NetScreen-1000 ScreenOS release 2.01r6 on the NetScreen-10/100 Screen...
DoS против Interchange
Переполнение буфера при длинном HTTP POST - запросе в WEB-интерфейсе...
CVE-2000-1151
CVE-2000-1151 affects the Baxter IRC client on BeOS r5 Pro and earlier. The issue is a remote denial-of-service triggered by a message containing a long URL, with no additional exploit details or remedial steps provided in the accompanying documents.
CVE-2000-1185
The CVE-2000-1185 entry concerns the telnet proxy component of the RideWay PN proxy server. According to the description, remote attackers can cause a denial of service by sending a flood of connections containing malformed requests. The primary documented impact is a partial loss of availability...
DoS против Cisco Catalyst (SSH Protocol Mismatch)
Подключение к ssh порту по не-ssh протоколу приводит к отказу коммутатора...
E-zine (MDMA group) опубликовали список уязвимостей во многих программных продуктах
Proxy Plus - небезопасные установки по-умолчанию, NiteServer FTPd - возможна DoS-атака, ISpy Webcam - хранит пароль в открытом виде, XiRCON IRC client - переполнение буфера, Offline Explorer - чтение локальных файлов с сервера, Argosoft FTP Server - обратный путь в директориях и множественные...
DoS против IMAIL
Переполнение буфера при длинном имени сервера в HTTP-запросе и в SMTP-AUTH команде...
CVE-2000-0939
CVE-2000-0939 affects Samba’s Web Administration Tool (SWAT) shipped with Samba 2.0.7. The issue allows a remote attacker over the network to trigger a denial-of-service by repeatedly sending a nonstandard URL in the GET HTTP request, forcing SWAT to restart. Connected sources corroborate SWAT ex...
DoS против WFTPD
Команда RNTO без команды RNFR приводит к краху сервера...
DoS possibility in syslog-ng
BalaBit security advisory Advisory ID: BB-2000/01 Package: syslog-ng Versions affected: versions prior to and including 1.4.8 Problem type: remote DoS attack Date: 2000-11-22 1 Background syslog-ng is a portable syslog implementation. Its highlights include regexp based log selection, TCP transpo...
CVE-2000-0507
CVE-2000-0507 concerns Imate Webmail Server 2.5. A remote attacker can cause a denial of service by sending a HELO command with an extremely long argument, potentially crashing/shutting down the SMTP service (network exploit, no auth required; availability impact). The vulnerability stems from ha...
CVE-2000-0508
This CVE concerns rpc.lockd in Red Hat Linux 6.1 and 6.2, where remote attackers can cause a denial of service by sending a malformed request. The available connected documents corroborate the affected component (rpc.lockd) and the impact (remote DoS), but do not provide concrete patch versions o...
CVE-2000-0451
CVE-2000-0451 concerns the Intel Express 8100 ISDN router, where remote attackers can cause a denial of service by sending oversized or fragmented ICMP packets. The available connected metadata confirms the affected device and the specific attack vector (ICMP amplification/fragmentation) that lea...
CVE-2000-0538
CVE-2000-0538 affects ColdFusion Administrator for ColdFusion 4.5.1 and earlier. A remote attacker can cause a denial-of-service by submitting an abnormally long login password, with OpenVAS notes describing passwords over 40,0000 characters that overwhelm the server. No explicit fixes or patches...
CVE-2000-0512
CUPS 1.04 and earlier versions are affected: they do not properly delete request files, allowing a remote attacker to cause a denial of service. Exploitation is network-based and does not require authentication; a patch exists (cups-DoS.patch) and related updates are referenced in the CVE context...
CVE-2000-0761
CVE-2000-0761 affects the OS/2 Warp 4.5 FTP server. The vulnerability allows a remote attacker to cause a denial of service by sending a long username. The root cause is implied to be improper input handling that leads to resource exhaustion. The provided documents do not specify a vendor patch, ...
CVE-2000-0549
CVE-2000-0549 affects Kerberos 4 KDC by not properly checking for null termination in AUTH_MSG_KDC_REQUEST, enabling remote attackers to cause denial of service via a malformed request. The available sources describe the issue as a null-termination handling flaw in the KDC protocol message proces...
sa_04.txt
01.gif 02.gif t4.jpg NSFOCUS Security AdvisorySA2000-04 Topic£ºMicrosoft Win9x client driver type comparing vulnerability Release Date£º August 20, 2000 Affected System: ================ - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition Non-affected system£º...
AOL Instant Messenger DoS
AOL Instant Messenger version 4.1.2010 others? appears to be vulnerable to a DoS attack when handling file transfers with filenames containing s. The problem I encountered is that trying to send a file to crash my victim's client would cause my client to crash first, defeating the purpose. To get...