CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...

Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Internet Router Revision 1.0 For Public Release 2001 November 14 08:00 UTC -0800 Summary The performance of Cisco 12000 series routers can be degraded when they have to send a large...

CVE-2001-0790

Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...

CVE-2001-0669

CVE-2001-0669 affects multiple IDS products (Cisco Secure IDS, Cisco Catalyst 6000 IDS Module, Dragon Sensor 4.x, Snort before 1.8.1, ISS RealSecure Network Sensor 5.x/6.x before XPU 3.2, and ISS RealSecure Server Sensor 5.5/6.0 for Windows) where an attacker can bypass HTTP attack detection by u...

CVE-2001-0790

Specter IDS versions 4.5 and 5.0 are affected by a remote DoS vulnerability: a port scan can cause the server to exhaust CPU while preparing alerts. The CVE entry confirms the issue originates from Specter IDS, with impact described as CPU exhaustion (availability impact). No specific remediation...

CVE-2001-0790

Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...

CVE-2001-0790: Undefined Security Weakness

Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...

CVE-2001-0962

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...

Обход многих IDS через Unicode (protection bypass)

Используя Unicode-кодирование во многих протоколах возможно обойти защиту IDS...

ISS Security Alert: Multiple Vendor IDS Unicode Bypass Vulnerability

Internet Security Systems Security Alert September 5, 2001 Multiple Vendor IDS Unicode Bypass Vulnerability Synopsis: ISS X-Force is aware of a vulnerability in many commercial and open- source IDS Intrusion Detection System products that may allow attackers to evade detection. Microsoft Web serv...

Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)

There's a buffer overflow in the remote web server through the ISAPI filter. It is possible to overflow the remote web server and execute commands as user SYSTEM. Additionally, other vulnerabilities exist in the remote web server since it has not been patched. %NASLMINLEVEL 70300 C Tenable Networ...

Solaris Arp Vulnerability

Vulnerability in Solaris arp1M Date Published: November 28, 2000 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris arp1M Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The...

CVE-2000-1177

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother BB before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter...

CVE-2000-0335

The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...

CVE-2000-0335: Undefined Security Weakness

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...

DoS против NetProwler

пакет с IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH приводит к краху IDS при включеной сигнатуре Man-in-the-Middle...

RFP2K05.txt

---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...

Уязвимость в BlackICE IDS

Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...

CVE-2000-0335

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...

piranha default password/exploit

Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...