3911 matches found
ServletExec 4.1 / JRun ISAPI Multiple DoS
By sending an overly long request for a .jsp file, it is possible to crash the remote web server. This problem is known as the ServletExec / JRun ISAPI DoS. %NASLMINLEVEL 70300 This script was written by Matt Moore Script audit and contributions from Carmichael Security Erik Anderson nb: domain n...
Microsoft Windows Guest Account Belongs to a Group
Using the supplied credentials, Nessus was able to determine that the 'Guest' user belongs to groups other than 'Guests' RID 546 or 'Domain Guests' RID 514. Guest users should not have any additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10907;...
Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It has been reported that sending an excessive number of requests for...
Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities
Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It h...
Sambar Server 5.1 - Sample Script Denial of Service
// source: https://www.securityfocus.com/bid/3885/info Sambar Server is a multi-threaded web server which will run on Microsoft Windows 9x/ME/NT/2000 operating systems. It is possible to cause a denial of service to Sambar Server by sending consecutive excessively long requests to the 'cgitest.ex...
Sambar Server 5.1 - Sample Script Denial of Service
Sambar Server 5.1 - Sample Script Denial of Service // source: https://www.securityfocus.com/bid/3885/info Sambar Server is a multi-threaded web server which will run on Microsoft Windows 9x/ME/NT/2000 operating systems. It is possible to cause a denial of service to Sambar Server by sending...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of...
Переполнение буфера в snmpnetstat из ucd-cnmp (buffer overflow)
Переполнение кучиа при большом числе записей в ответе сервера...
Локальный DoS в Windows NT/2000
Вывод в консоле большого числа неотображаемых символов приводит к кразу подсистемы Win32 CSRSS...
glFTPd 1.x - 'LIST' Denial of Service
source: https://www.securityfocus.com/bid/3201/info glFtpD contains an input validation error that may allow a malicious user to cause a denial of service against a host running the daemon. The problem occurs when a specially crafted 'LIST' command is received by the server. If the argument to th...
MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service
MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content...
Проблемы с листингом в apache
При запросе содержащем большое количество '/' можно получить листинг директории вместо index-файла...
DoS против Netscape Fasttrack
Большое число запросов к несуществующим страницам приводит к утечке памяти в прокси...
GoodTech FTP Server Denial of Service
Description GoodTech FTP Server is subject to a denial of service. If an attacker successfully makes an unusually large number of connections, the server will crash. Technologies Affected GoodTech FTP Server 95/98 3.0.1 GoodTech FTP Server NT/2000 3.0.1 GoodTech has addressed this issue in a new...
LICQ 0.85/1.0.1/1.0.2 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2406/info At least one version of LICQ is vulnerable to a remote buffer overflow. By sending many characters 12000-16000 to the port on which LICQ is listening, an attacker can cause excessive data to be copied onto the stack and overwrite critical par...
Watchguard SOHO 2.2 - Denial of Service
Watchguard SOHO 2.2 - Denial of Service source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to...
All, After reading a report on security focus that deals with the sonicwall soho versions 4.0 and 5.0 being vulnerable to a buffer overflow by using a alot of characters in the username...I started testing againg our Sonicwall Pro and Pro VX in the lab. Entering this for the username -...
Небольшая дырка в I-Gear
Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...
DoS против HP Jet Direct
nmap-подобное сканирование портов принтера nmap -sT -PT targetprinterприводит к его краху. Кроме того, к таким же результатам приводит большое количествео случайных данных в порт 515...
CVE-1999-0534
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single...