2775 matches found
[SECURITY] Fedora 13 Update: aria2-1.9.3-1.fc13
aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...
Why Bob Maley's Firing is Bad for All of Us
The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...
[SECURITY] Fedora 10 Update: aria2-1.3.1-2.fc10
aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...
Chetcpasswd 2.x: multiple vulnerabilities
From Debian.org: "chetpasswd uses the HTTPXFORWARDEDFOR for authentication purposes.... Obviously, HTTPXFORWARDEDFOR is not a trusted variable, and can be spoofed by any scriptkiddie who can read the man page of wget .... Furthermore, this cgi script doesn't seem to implement any rate limiting fo...
Code injection
Mail Management Agent MAILMA aka Mail Management Server in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account...
inetd DoS patched
Upgraded inetd packages are available for Slackware 8.1, 9.0 and - -current. These fix a previously hard-coded limit of 256 connections-per-minute, after which the given service is disabled for ten minutes. An attacker could use a quick burst of connections every ten minutes to effectively disabl...
CVE-2002-0038
Vulnerability in the cache-limiting function of the unified name service daemon nsd in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk...
CVE-2002-0038
Technical details about CVE-2002-0038 are not publicly provided in the supplied documents. The data confirms a denial-of-service risk in IRIX nsd 6.5.4–6.5.11, but no specifics on vectors or fixes are included here. Monitor for updates.
CVE-2002-0038: Undefined Security Weakness
Vulnerability in the cache-limiting function of the unified name service daemon nsd in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk...
PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...
PT-2000-1165 · Oracle · Iplanet Web Server
Name of the Vulnerable Software and Affected Versions: iPlanet Web Server version 4.1 Description: The issue allows remote attackers to cause a denial of service by sending a large number of GET commands, which consumes memory and causes a kernel panic. Recommendations: For iPlanet Web Server...
spank.txt
------------------------------------------------ Explanation of the 'spank' attack -- a new breed stream/raped ------------------------------------------------ By: lst [email protected] This is a tad different than the previous release. Stream/Raped mearly flooded the host with ack's or no flags a...
PT-1999-1399 · Alt N · Mdaemon
Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...