CVE-2001-0669: Undefined Security Weakness

Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...

CVE-2000-0479

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

CVE-2000-0480

Summary: CVE-2000-0480 affects Dragon Telnet Server. A remote attacker can cause a denial of service by sending an excessively long username. The issue is network-accessible with low complexity and no authentication. Nessus details indicate the remote overflow occurs when a login name exceeds abo...

CVE-2000-0480

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0479

Dragon FTP server is affected by CVE-2000-0479: a remote buffer overflow triggered by a very long USER command can crash the server, with the potential for arbitrary code execution as described by Nessus. Affected product/version details are not provided in the sources here beyond “Dragon FTP ser...

CVE-2000-0479: Undefined Security Weakness

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

CVE-2000-0480: Undefined Security Weakness

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

dragonftp.py

!/usr/bin/python Dragon Serverftp DoS Proof of Concept Code. Vulnerability Discovered by USSR Labshttp://www.ussrback.com Simple Script by [email protected] By connecting to port 21ftp on a system running Dragon FTP Server v1.00/2.00 and typing USER 16500 bytes the service will crash This...

Дырки в Dragon Server

Многочисленные дырки - переполнения буфера, обращения по нулевому адресу и т.д. - позволяют как минимум DoS-атаку...

Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability USSR Advisory Code: USSR-2000046 Release Date: June 16, 2000 Systems Affected: Dragon Server v2.00 Dragon Server v1.00 THE PROBLEM The Ussr Labs team has recently discovered ...

CVE-2000-0480

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0479

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

Shadow Op Software Dragon Server 1.02.0 - Multiple Denial of Service Vulnerabilities

Shadow Op Software Dragon Server 1.02.0 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/1352/info Two denial of service vulnerabilities exist in the Dragon Server package, versions 1.00 and 2.00, from Shadow Ops Software. By supplying large arguments to two...

Shadow Op Software Dragon Server 1.0/2.0 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/1352/info Two denial of service vulnerabilities exist in the Dragon Server package, versions 1.00 and 2.00, from Shadow Ops Software. By supplying large arguments to two different network services, it is possible to cause these services to be innaccessibl...

CVE-1999-0913

The CVE-1999-0913 entry concerns the dfire.cgi script in Dragon-Fire IDS, where remote users can trigger command execution by supplying shell metacharacters. This is a remote, unauthenticated exposure (attack vector: network) with high impact on confidentiality, integrity, and availability (C/C/I...

CVE-1999-0913

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...

CVE-1999-0913: Undefined Security Weakness

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...

CVE-1999-0913

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...

Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution

source: https://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a remote compromise of the system running Dragon-Fire. Via the web...

Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution

Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution source: https://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a...