DOS во встроенном NAT сервере Windows 2000

Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...

CVE-2005-3901: Undefined Security Weakness

Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service instability or crash, as demonstrated using an alpha release build of Flash Player 8.5 build 133...

[[email protected]: Macromedia Security Bulletins]

Macromedia Security Bulletins: - Contribute Publishing Server - Flash Communication Server - Breeze Communication Server and Breeze Live Server MPSB05-08 Contribute Publishing Server Password Encryption Summary: Macromedia Contribute Publishing Server CPS 1.11 includes a security update that...

Veritas Backup Exec Agent 8.x/9.x Browser Overflow (c version)

No description provided by source. / Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to: -iDEFENSEdiscovery-www.iDEFENSE.com, -Thor...

Mandrake Linux Security Advisory : evolution (MDKSA-2003:045)

Several vulnerabilities were discovered in the Evolution email client. These problems make it possible for a carefully constructed email message to crash the program, causing general system instability by starving resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

MS Internet Explorer Overly Trusted Location Cache Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Internet Explorer Overly Trusted Location Cache Exploit ========================================================== Overly Trusted Location Variant Method Cache Vulnerability GO! This...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny service to legitimate users of the...

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service

Xlight FTP Server 1.x - Long Directory Request Remote Denial of Service source: https://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be...

Microsoft Windows - Workstation Service WKSSVC Remote (MS03-049)

Microsoft Windows - Workstation Service WKSSVC Remote MS03-049 / Author: snooq Date: 14 November 2003 +++++++++++++ THIS IS A PRIVATE VERSION +++++++++++++++ This is just slightly better than the one I posted to packetstorm.... The public version will crash 'services.exe' immediately while this o...

Serious Sam Engine 1.0.5 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the client sends a certain malformed parameter to the server...

E107 - Chatbox.php Denial of Service

E107 - Chatbox.php Denial of Service source: https://www.securityfocus.com/bid/8930/info It has been reported that E107 may be prone to a denial of service vulnerability. The issue has been reported to exist due to improper handling of user-supplied data in the form of HTML or script code to the...

WinSyslog Interactive Syslog Server 4.21 - long Message Remote Denial of Service

WinSyslog Interactive Syslog Server 4.21 - long Message Remote Denial of Service source: https://www.securityfocus.com/bid/8821/info WinSyslog is prone to a remotely exploitable denial of service vulnerability. The issue exists in the Interactive Syslog Server specifically. This occurs when the...

WinSyslog Interactive Syslog Server 4.21 - long Message Remote Denial of Service

source: https://www.securityfocus.com/bid/8821/info WinSyslog is prone to a remotely exploitable denial of service vulnerability. The issue exists in the Interactive Syslog Server specifically. This occurs when the program receives multiple excessive syslog messages via the port it listens on...

D-Link DI-704P - Long URL Denial of Service

D-Link DI-704P - Long URL Denial of Service source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave ...

D-Link DI-704P - Long URL Denial of Service

source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave in an unstable manner. Malicious requests ma...

Mailtraq 2.1.0.1302 - Remote Format String SMTP Resource Consumption

Mailtraq 2.1.0.1302 - Remote Format String SMTP Resource Consumption source: https://www.securityfocus.com/bid/7926/info It has been reported that Mailtraq does not reliably handle format strings in some SMTP protocol fields. This may cause a system to become unstable and crash, allowing a remote...

PalmOS 3/4 - ICMP Flood Remote Denial of Service

// source: https://www.securityfocus.com/bid/7597/info A problem with PalmOS may result in a denial of service. It has been reported that PalmOS becomes unstable when flooded with ICMP ECHOREQUEST traffic. A remote attacker can trigger a device lockup condition or cause the Palm OS device to loos...

[Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download.

Greetings. We, :: Operash :: here release the information about vulnerability of Opera. --------------------------------------------------------------------------------- SUMMARY : Opera 7/6 Long File Extension Heap Buffer Overrun Vulnerability in Download. PRODUCT : Opera for Windows VERSIONS :...

osCommerce 2.2 - product_info.php Denial of Service

osCommerce 2.2 - productinfo.php Denial of Service source: https://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQ...

osCommerce 2.2 - 'product_info.php' Denial of Service

source: https://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQL and web server hosting osCommerce reportedly...