CVE-2001-1284

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users...

CVE-1999-1132

Windows NT 4.0 allows remote attackers to cause a denial of service crash via extra source routing data such as 1 a Routing Information Field RIF field with a hop count greater than 7, or 2 a list containing duplicate Token Ring IDs...

CVE-2001-0922

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in...

MS01-059: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise (315000)

Using a specially crafted NOTIFY directive, a remote attacker can cause code to run in the context of the Universal Plug and Play UPnP subsystem or possibly launch a denial of service attack against the affected host. Note that, under Windows XP, the UPnP subsystem operates with SYSTEM privileges...

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...

Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Internet Router Revision 1.0 For Public Release 2001 November 14 08:00 UTC -0800 Summary The performance of Cisco 12000 series routers can be degraded when they have to send a large...

CVE-2001-0790

Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...

CVE-2001-0669

CVE-2001-0669 affects multiple IDS products (Cisco Secure IDS, Cisco Catalyst 6000 IDS Module, Dragon Sensor 4.x, Snort before 1.8.1, ISS RealSecure Network Sensor 5.x/6.x before XPU 3.2, and ISS RealSecure Server Sensor 5.5/6.0 for Windows) where an attacker can bypass HTTP attack detection by u...

CVE-2001-0790

Specter IDS versions 4.5 and 5.0 are affected by a remote DoS vulnerability: a port scan can cause the server to exhaust CPU while preparing alerts. The CVE entry confirms the issue originates from Specter IDS, with impact described as CPU exhaustion (availability impact). No specific remediation...

CVE-2001-0790

Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...

CVE-2001-0962

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...

ISS Security Alert: Multiple Vendor IDS Unicode Bypass Vulnerability

Internet Security Systems Security Alert September 5, 2001 Multiple Vendor IDS Unicode Bypass Vulnerability Synopsis: ISS X-Force is aware of a vulnerability in many commercial and open- source IDS Intrusion Detection System products that may allow attackers to evade detection. Microsoft Web serv...

Обход многих IDS через Unicode (protection bypass)

Используя Unicode-кодирование во многих протоколах возможно обойти защиту IDS...

Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)

There's a buffer overflow in the remote web server through the ISAPI filter. It is possible to overflow the remote web server and execute commands as user SYSTEM. Additionally, other vulnerabilities exist in the remote web server since it has not been patched. %NASLMINLEVEL 70300 C Tenable Networ...

Solaris Arp Vulnerability

Vulnerability in Solaris arp1M Date Published: November 28, 2000 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris arp1M Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The...

CVE-2000-1177

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother BB before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter...

CVE-2000-0335

The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...

DoS против NetProwler

пакет с IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH приводит к краху IDS при включеной сигнатуре Man-in-the-Middle...

RFP2K05.txt

---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...

Уязвимость в BlackICE IDS

Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...