4712 matches found
CVE-2003-0625
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...
PT-2003-1036 · Xfstt · Xfstt
Name of the Vulnerable Software and Affected Versions: xfstt affected versions not specified Description: The issue is related to an off-by-one error in xfstt, allowing remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake. This can lead ...
TCP/IP implementations handle unusual flag combinations inconsistently
Overview Various vendors' TCP/IP implementations handle packets containing unusual flag combinations in different ways, which may lead to a violation of implicit or explicit security policies. Description Background on TCP/IP Connection Semantics To establish a TCP connection, a client and server...
CVE-2002-1824
Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear...
Nylon DoS
Closing client socket during SOCKS5 handshake causes server to hang with 100 CPU usage...
Kill a Unisys Clearpath with nmap port scan
Unisys "Clearpath" mainframes are very sensitive to the probes of nmap and similar programs. Basically, by only port-scanning not even fingerprinting, you can cause the entire machine to seize up. Yes, the whole machine...not just a job or the TCP/IP device. The problem may be occurring because t...
apache-linux.txt
/ LINUX X86 APACHE REMOTE EXPLOIT!!!!!!!!! This is the unpublished source for apache OpenSSL handshake exploit. We obtained this exploit by modifying a circulating apache worm, created by contem@efnet BY nebunu compile: gcc -o apache-ex apache.ex.c -lcrypto run: ./apache-ex do not use hostname! u...
OpenSSL servers contain a remotely exploitable buffer overflow vulnerability during the SSL3 handshake process
Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL servers that could lead to the execution of arbitrary code on the system Description Servers running OpenSSL pre-release version 0.9.7 with Kerberos...
OpenSSL servers contain a buffer overflow during the SSL2 handshake process
Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL servers that could lead to the execution of arbitrary code on the server. Description Versions of OpenSSL servers prior to 0.9.6e and pre-release...
OpenSSL clients contain a buffer overflow during the SSL3 handshake process
Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. A remotely exploitable vulnerability exists in OpenSSL clients that could lead to the execution of arbitrary code on the client's system. Description OpenSSL clients using SSLv3 prior to version 0.9.6e and...
CVE-2000-0211
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...
CVE-2000-0211
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...
CVE-1999-0601
A network intrusion detection system IDS does not properly handle data within TCP handshake packets...
CVE-1999-0601
CVE-1999-0601 affects a network intrusion detection system (IDS) and is caused by improper handling of data within TCP handshake packets. The public records (NVD, CVE list, Red Hat entry) describe the vulnerability as an IDS failing to process TCP handshake data correctly, with a base CVSS v2.0 s...
Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service
Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service // source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service,...
Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service
// source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service, including any open sessions during the time of the crash, is required in order t...
CVE-1999-0752
CVE-1999-0752 pertains to a denial-of-service in Netscape Enterprise Server caused by a buffer overflow during the SSL handshake. Connected sources corroborate a handshake-related DoS vector with the affected product as Netscape Enterprise Server; however, none of the provided documents specify a...
CVE-1999-0751
CVE-1999-0751 : Buffer overflow in the Accept command of Netscape Enterprise Server 3.6 with the SSL Handshake Patch. The issue is remote and related to the Accept header/argument length, potentially allowing code execution on the remote system and impacting availability. Affected product: Netsca...