NSSI-2002-tpfw: Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities

NSSI-Research Labs Security Advisory http://www.nssolution.com Ph "Maximum e-security" http://nssilabs.nssolution.com Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities Author: Aaron Tan Lu / b45h3r e-Mail: [email protected] / [email protected] Advisory Code: NSSI-2002-tpfw Tested...

SynAttackProtect.txt

[email protected] Bug / Security / Advisory 21,November, 2000 Killing NT 4.0 HOT FIXES or NO / SP6a Remotely using SynAttackProtect Key Corrected version and solution FOUND : /// Vulnerable Systems \\ Windows NT 4.0 SP6a + with or without HOT Fixes + SynAttackProtect set /// RISK FACTOR \...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

// source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle the condition of too many. If an attacker somehow causes a...

Дырка в eTrust Access Control (SeOS)

Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...

HTTP Proxy CONNECT Request Relaying

The proxy allows users to perform CONNECT requests such as : CONNECT http://cvs.example.org:23 This request gives the person who made it the ability to have an interactive session with a third-party site. This issue may allow attackers to bypass your firewall by connecting to sensitive ports such...

HTTP Proxy POST Request Relaying

The proxy allows the users to perform POST requests such as POST http://cvs.nessus.org:21 without any Content-length tag. This request may give an attacker the ability to have an interactive session. This problem may allow attackers to go through your firewall, by connecting to sensitive ports li...