Cisco Intrusion Prevention System MainApp SSL/TLS DoS (cisco-sa-20150311-ips)

According to its self-reported version, the Cisco Intrusion Prevention System software running on the remote host is affected by a denial of service vulnerability within the SSL/TLS subsystem due to a race condition when handling multiple HTTPS requests on the management interface. A remote...

Cisco Intrusion Prevention System DoS

Кратковременные условия при разборе SSL...

Jays Shell Booter Denial of Service Tool

Jays Shell Booter is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot b...

Race condition

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

CVE-2015-0654

Cisco IPS CVE-2015-0654 is a race condition in the TLS subsystem of MainApp on the management interface that can be exploited by remote attackers establishing numerous HTTPS sessions to cause the MainApp process to become unresponsive (DoS). Affected software is Cisco IPS Software prior to 7.3(3)...

CVE-2015-0654

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

CVE-2015-0654: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

JavaScript String Dissection Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript Data Encoding Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Reversal Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Inflation Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

CVE-2015-0631

Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...

Race condition

Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...

CVE-2015-0631

Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...

CVE-2015-0631

Cisco IPS CVE-2015-0631 is a race-condition vulnerability in the SSL/TLS subsystem used by the web management interface. During image upgrading, key/certificate regeneration can be disrupted by a rapid sequence of HTTPS connections to the management interface, allowing a remote attacker to cause ...

PT-2015-4771

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS devices affected versions not specified Description A race condition exists in the SSL implementation, allowing remote attackers to cause a denial of service by making many management-interface HTTPS...

DNS Enumeration Script: DNSRecon

DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...

Adobe Flash CVE-2 0 1 5-0 3 1 3 new 0day-vulnerability warning-the black bar safety net

In the Adobe Flash Player newly discovered a high risk vulnerability, hackers can take advantage of its large-scale forced-by downloaddrive-by downloadattacks, also known as the“website hanging horse attack”, when you're viewing contains a malicious code of a web page or to access the AD, it will...

Marketo Cloud - Persistent Mail Encoding Vulnerability

Document Title: =============== Marketo Cloud - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1321 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 132...

Symantec Web Gateway OS Authenticated Command Injection

SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to operating system command injection by an authenticated but less-privileged user. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Web Gateway Appliance | 5.2.1 and prior | Symantec Web Gateway 5.2...