WebObjects DoS

Howdy, We've found a DoS in WebObjects apps with a possible remote exploit. So far we've found this problem in WebObjects 4.5 Developer running with the CGI-adapter and IIS 4.0 on NT 4.0 SP5. WO 4.5 Beta on Solaris 2.6 with Netscape Enterprise isn't vulnerable. Overview: If you send a large 4.1K...

CVE-1999-0193

CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...

CVE-1999-0011

CVE-1999-0011 corresponds to Denial of Service vulnerabilities in BIND 4.9 and BIND 8, reported across multiple vendors. Public records indicate DoS via CNAME records and zone transfers. Affected products include BIND 4.9.x and 8.x; the root cause is not detailed in the provided documents beyond ...

freebsd_DoS.txt

Subject: Local DoS in FreeBSD To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This was first posted to the FreeBSD security list on the 9th of August, subsequently discussed on freebsd-stable and freebsd-hackers... no one seems to care, even though it is able to lock u...

nmap-DoS-2.txt

Date: Wed, 23 Dec 1998 09:31:23 -0500 From: Richard Reiner Reply-To: Bugtraq List To: [email protected] Subject: SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability SecureXpert Labs Advisory SX-98.12.23-01 Widespread DoS vulnerability can crash systems or disable critical...

flowpoint2000.txt

Date: Tue, 11 Aug 1998 20:35:20 -0700 From: Jason Ackley Subject: DoS in Flowpoint 2000 DSL routers Hello, Quick Overview: There exists a DoS in Flowpoint's ADSL 2000 router 'fp2k' running software rev 1.2.3 anyone have other revs to test? Lil Backgrounder: Flowpoint builds the routers and...

ipop3d.4.xx.bof.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Overflow in CAC.Washington.EDU ipop3d 4.xx CAC.Washington.EDU ipop3d 4.xx, at least on Linux platform, has serious security hole. When data is read from so-called mailbox lock created in /tmp directory this happens under certain condition...

sendmail.8.9.1.DoS.txt

Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...

Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...