Microsoft Windows TCP/IP Denial of Service Vulnerability (2790655)

This host is missing an important security update according to Microsoft Bulletin MS13-018. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

USN-1651-1: Linux kernel vulnerability

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. CVE-2012-4565 Mathias Krause discovered an information leak in the Linux kernel's TUN/TAP device driver. A local user could exploit this...

Linux kernel 2.6.x iptables '--syn'规则安全绕过漏洞

Bugtraq ID: 53733 CVE ID：CVE-2012-2663 Linux是一款开源的操作系统。 Linux Kernel iptables在某些情况下不正确处理SYN+FIN，攻击者可以发送SYN/FIN绕过所有包含--syn的访问规则，未授权创建连接。 0 Linux kernel 2.6.x 厂商解决方案 Linux ----- 用户可参考如下供应商提供的安全公告获得补丁信息：...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables...

CVE-2011-2250

Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables...

CVE-2011-2250: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise FIN component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Receivables...

PT-2011-3713

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.0 Bundle 36 and 9.1 Bundle 13 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Receivables in the PeopleSoft...

2^6 TCP Control Bit - Fuzzer (No ECN or CWR)

!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...

CVE-2009-1926

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service TCP outage via a series of TCP sessions that have pending data and a 1 small or 2 zero receive window size, and remain in the...

CVE-2009-1926: Undefined Security Weakness

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service TCP outage via a series of TCP sessions that have pending data and a 1 small or 2 zero receive window size, and remain in the...

3Com Shark Fin Comcast-supplied Default Password (deprecated)

Binary data 4824.prm...

Information disclosure

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2007-3537

CVE-2007-3537 affects IBM OS/400 (i5/OS) on iSeries, specifically V4R2M0 through V5R3M0. The vulnerability arises because the system sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

CVE-2007-3537: Undefined Security Weakness

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

CVE-2004-2252

The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...

CVE-2004-2252: Observable Discrepancy

The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...

CVE-2002-1778

CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...

CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...